ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Nov 30, 2023 · ZeroDay Catalog

    Critical Memory Corruption Vulnerability in Apple WebKit

    A memory corruption vulnerability in Apple’s WebKit could allow for code execution through malicious web content, impacting multiple products.

    What changed

    Apple has identified a memory corruption vulnerability within WebKit that affects several of its products. This flaw can lead to arbitrary code execution when users interact with specially crafted web content.

    The vulnerability underscores the importance of addressing potential security risks associated with web browsing and HTML content processing.

    Who is affected

    The vulnerability affects a range of Apple products, as well as other applications that utilize WebKit for HTML processing.

    Organizations using affected products should be aware of the potential risks and take necessary precautions.

    • Apple iOS devices
    • Apple iPadOS devices
    • Apple macOS systems
    • Apple Safari browser

    What to do

    Users and administrators are advised to apply the latest updates from Apple to mitigate the risks associated with this vulnerability.

    Regular monitoring of security advisories and prompt patching of affected systems is essential to maintain security.

    • Update all Apple devices to the latest software version.
    • Review and apply security patches for any non-Apple products that utilize WebKit.
    • Educate users about the risks of interacting with untrusted web content.

    Original report