A high-severity vulnerability in Oracle E‑Business Suite has received security patching along with a warning that it has already been exploited in the wild by ransomware threat groups.
When it comes to zero-days and spyware, China and North Korea’s hacking teams head up the leaderboard with five 2024 incidents each. Russia had three, and South Korea one; another three were likely the work of APT groups but a specific nation was not pinned down.
Cybersecurity firm Mandiant has issued a warning advising that a suspected Chinese threat actor is behind exploits of Ivanti Connect Secure VPN appliances that make use of zero-day CVE-2025-0282.
2023 saw Mandiant log 138 total incidents of exploited vulnerabilities for its report, of which 70% were zero-days. That is up substantially from 61% and 62% in the two prior years.
A relatively new Russian outfit called “Operation Zero” has made major waves by offering up to $20 million for successful zero-day exploits, a price that would have previously been thought crazy.
Despite Apple’s increased attention to bolstering iMessage against these sorts of zero-click attacks, the new Pegasus spyware zero-days are once again able to exploit target phones without the user clicking on or interacting with a message in any way.
Google’s Threat Analysis Group (TAG) finds that a group of about 30 of the world’s more serious commercial spyware vendors are peddling zero-days for Android, iOS, Chrome and Samsung’s pre-installed mobile device software.
Twitter says that the security breach occurred in December 2021, but was not public knowledge until July 21 of this year. An attacker using a zero-day was able to capture phone numbers and email addresses from anonymous accounts.
Microsoft appears to have at least been aware of the possibility of this zero-day since 2021. Remote code execution using this Office exploit has been spotted in Russia and Belarus, and by a Chinese APT group.