étiquette : PuzzleMaker


Juin

11

2021
A zero-day (also known as zero-hour or 0-day) vulnerability is an undisclosed computer application vulnerability that could be exploited to adversely affect the computer programs, data, additional computers or a network. It is known as a "zero-day" because once the flaw becomes known, the application author has zero days in which to plan and advise any mitigation against its exploitation (by, for example, advising workarounds or issuing patches). Attacks employing zero-day exploits are often attempted before or on the day that notice of the vulnerability is released to the public; sometimes before the author is aware or has developed and made available corrected code. Zero-day attacks are a severe threat.

Découverte d’un nouvel acteur appelé « PuzzleMaker » et exploitant des failles 0-day sur Google Chrome et Windows

Les chercheurs de Kasperky Technologies ont découvert le 14 avril 2021 une vague d’attaques ciblées à l’encontre de plusieurs entreprises.Ces attaques exploitaient un enchainement de failles 0-day au sein de Google Chrome et de Windows afin de compromettre le système de leurs victimes. La vulnérabilité visant Chrome permettait à un attaquant d’exploiter du code arbitraire sur le système. Cependant, cette vulnérabilité ne permet pas de...

Read More