May 2024 – Page 9

PoC exploit released for RCE zero-day in D-Link EXO AX4800 routers

The D-Link EXO AX4800 (DIR-X4860) router is vulnerable to remote unauthenticated command execution that could lead to complete device takeovers by attackers with access to the HNAP port. […]

14 May

Microsoft fixes VPN failures caused by April Windows updates

Today, Microsoft fixed a known issue breaking VPN connections across client and server platforms after installing the April 2024 Windows security updates. […]

14 May

Apple fixes Safari WebKit zero-day flaw exploited at Pwn2Own

Apple has released security updates to fix a zero-day vulnerability in the Safari web browser exploited during this year’s Pwn2Own Vancouver hacking competition. […]

14 May

Apple and Google add alerts for unknown Bluetooth trackers to iOS, Android

On Monday, Apple and Google jointly announced a new privacy feature that warns Android and iOS users when an unknown Bluetooth tracking device travels with them. […]

14 May

VMware fixes three zero-day bugs exploited at Pwn2Own 2024

VMware fixed four security vulnerabilities in the Workstation and Fusion desktop hypervisors, including three zero-days exploited during the Pwn2Own Vancouver 2024 hacking contest. […]

14 May

Google Chrome emergency update fixes 6th zero-day exploited in 2024

Google has released emergency security updates for the Chrome browser to address a high-severity zero-day vulnerability tagged as exploited in attacks. […]

13 May

PyPi package backdoors Macs using the Sliver pen-testing suite

A new package mimicked the popular ‘requests’ library on the Python Package Index (PyPI) to target macOS devices with the Sliver C2 adversary framework, used for gaining initial access to corporate networks. […]

13 May

Helsinki suffers data breach after hackers exploit unpatched flaw

The City of Helsinki is investigating a data breach in its education division, which it discovered in late April 2024, impacting tens of thousands of students, guardians, and personnel. […]

12 May

Largest non-bank lender in Australia warns of a data breach

Firstmac Limited is warning customers that it suffered a data breach a day after the new Embargo cyber-extortion group leaked over 500GB of data allegedly stolen from the firm. […]

11 May

The Post Millennial hack leaked data impacting 26 million people

Have I Been Pwned has added the information for 26,818,266 people whose data was leaked in a recent hack of The Post Millennial conservative news website. […]

Month: May 2024

PoC exploit released for RCE zero-day in D-Link EXO AX4800 routers

Microsoft fixes VPN failures caused by April Windows updates

Apple fixes Safari WebKit zero-day flaw exploited at Pwn2Own

Apple and Google add alerts for unknown Bluetooth trackers to iOS, Android

VMware fixes three zero-day bugs exploited at Pwn2Own 2024

Google Chrome emergency update fixes 6th zero-day exploited in 2024

PyPi package backdoors Macs using the Sliver pen-testing suite

Helsinki suffers data breach after hackers exploit unpatched flaw

Largest non-bank lender in Australia warns of a data breach

The Post Millennial hack leaked data impacting 26 million people