Dossier
zero-day attacks
Coverage of zero-day attacks in the Nexus archive.
- SonicWall SMA1000 flaws exploited as zero-days to push custom malware
Two vulnerabilities in SonicWall SMA1000 were exploited in zero-day attacks for weeks, enabling threat actors to install custom malware on vulnerable VPN appliances. The flaws were recently disclosed but were used before patches were available.
- CISA orders feds to patch Windows flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to address a critical Windows vulnerability being exploited in zero-day attacks. The directive emphasizes urgent patching to mitigate potential breaches.