A zero day hack has been used against a human rights activist.  In this case it was unsuccessful because rather than clicking on the link, he did what you should do, he forwarded it to security experts that uncovered the exploit. Read more about it on Network World here:  NetworkWorld iOS Zero Day Hack Found

An Italian teen who we will call talented but irresponsible found  and developed an exploit of Apple’s Mac OS.  Talented in that he could find not just one but two in the relatively secure Mac OS.  Irresponsible in that he published the details on GitHub only hours after notifying the software giant of his discovery.  It is customary to allow the developer time to address and patch an issue before disclosing it to the world for every hacker to jump on and exploit.  What he did by discovering the flaws is commendable.  But by disclosing them without any adequate time for the developer (Apple) to respond is reckless and causes a large issue opening even more computers to hack attempts because of his rush to seek fame.  

The exploit he developed yields root access

Source: Italian teen finds two zero-day vulnerabilities in OS X | Network World

Attackers exploit zero-day flaw in popular WordPress plug-in | Network World.

Do you manage your updates/patches?  Do you know if you are secure? If not you might want to contact us. Microsoft Patches 3 Critical vulnerabilities in Windows. But you definitely want to check out this article below.

Fixes for three zero-day vulnerabilities in Patch Tuesday update.

Some Hacks may leave no trace!

IE zero-day attack delivers malware into memory then poofs on reboot.

There is a Severe security issue with Microsoft Internet Explorer.  The exploit is being used now.  Be sure to apply the upcoming patch that Microsoft is releasing this coming week!! Read more about it here: Microsoft to patch zero-day IE bug now under attack – Network World. As always if you need help contact us.

Another Zero Day Vulnerability is Possible (Windows XP & 2003 SMB).  What is a Zero Day threat you may ask.  It’s basically a threat that is known to some that there is as yet no fix for leaving computers vulnerable to attack.  Think of it like a theif knowing you have a key hidden under your door mat.  Only in this case you are away so you can’t just remove the key. Security exploits like this make it necessary to update your workstations and servers often.  Once a vulnerability is known/published if a hacker didn’t know about it before they start trying to make use of it and work against the people slow to update their machines. Here is an article from CRN News about the latest threat. Microsoft Investigating Windows Zero Day Vulnerability Report. If you need assistance as always you can contact us.