ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Jan 22, 2024 · ZeroDay Catalog

    Apple Addresses WebKit Type Confusion Vulnerability Across Multiple Products

    Apple has released updates to address a critical type confusion vulnerability in WebKit, affecting various products and potentially leading to arbitrary code execution.

    What changed

    Apple has resolved a type confusion vulnerability in WebKit that could allow maliciously crafted web content to execute arbitrary code on affected devices. This issue has been addressed with improved validation checks.

    The fix is included in several updates, including Safari 17.3 and multiple versions of iOS, iPadOS, macOS, tvOS, and visionOS.

    • Type confusion vulnerability could lead to arbitrary code execution.
    • The vulnerability was linked to the Coruna exploit.
    • Updates were released on January 22, 2024, for iOS 17.3.

    Who is affected

    The vulnerability impacts a range of Apple products, which may expose users to significant security risks if not updated promptly.

    Affected products include Safari, iOS devices, iPadOS devices, macOS systems, and tvOS.

    • Safari 17.3 and earlier versions.
    • iOS 15.8.7, 16.7.5, and 17.3.
    • iPadOS 15.8.7, 16.7.5, and 17.3.
    • macOS Monterey 12.7.3, macOS Sonoma 14.3, and macOS Ventura 13.6.4.

    What to do

    Users and administrators are strongly advised to update their devices to the latest versions to mitigate the risk associated with this vulnerability.

    Regularly check for updates and apply them promptly to ensure continued protection against potential exploits.

    • Update Safari to version 17.3 or later.
    • Upgrade iOS and iPadOS to the latest versions available.
    • Ensure macOS systems are running the latest updates.

    Original report

  2. Jan 1, 2024 · ZeroDay Catalog

    Apple Addresses Memory Corruption Vulnerability Across Multiple Products

    Apple has released updates to address a critical memory corruption vulnerability that could allow attackers to bypass Pointer Authentication in several of its products.

    What changed

    Apple has resolved a memory corruption vulnerability that affected multiple products, enhancing security through improved checks. The vulnerability could potentially allow an attacker with arbitrary read and write capabilities to bypass Pointer Authentication.

    This issue has been addressed in the latest versions of macOS Ventura (13.1), watchOS (9.2), iOS (16.2), iPadOS (16.2), and tvOS (16.2).

    Who is affected

    The vulnerability impacts a range of Apple products, particularly those running older versions of iOS and iPadOS.

    Users of macOS Ventura, watchOS, iOS, iPadOS, and tvOS prior to the patched versions are at risk.

    • macOS Ventura users
    • iOS users, especially those on versions prior to 15.7.1
    • iPadOS users
    • watchOS and tvOS users

    What to do

    It is crucial for users and administrators to update their devices to the latest versions to mitigate the risk associated with this vulnerability. Regularly applying updates can help protect against potential exploits.

    Monitor security advisories from Apple for any further developments or additional vulnerabilities.

    • Update to macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2.
    • Review security settings related to Pointer Authentication.
    • Stay informed about future patches and security updates from Apple.

    Original report