Well shit... I can't access account balances in TWO different bank accounts. One just spins then says, "Try again later," the other is actually acknowledging they are having "technical difficulties." WHAT IS GOING ON?!!! Is anyone else having these issues?

#ZeroDay? #HackAttack? #USBanks

Commvault Confirms Nation-State Attack via Zero-Day Exploit in Azure Environment

Commvault has confirmed that a nation-state threat actor exploited a zero-day vulnerability (CVE-2025-3928) to gain access to its Azure cloud environment in February 2025.

Key facts:
- Breach was first detected after Microsoft flagged suspicious activity on Feb 20.
- Attackers exploited a flaw in Commvault Web Server software to plant webshells.
- Exploit required authenticated access, suggesting credential theft or prior compromise.
- Customer backup data remained unaffected, and Commvault operations were not disrupted.

CISA has now added CVE-2025-3928 to its Known Exploited Vulnerabilities catalog.
- Federal agencies must secure affected systems by May 19, 2025.
- The vulnerability has a CVSS score of 8.8 — a high-severity threat vector.

Commvault’s response included:
- Immediate credential rotation
- Partnership with two leading cybersecurity firms, the FBI, and CISA
- New guidance for customers on Azure Conditional Access, secret rotation, and IP monitoring
- Blocklist of known malicious IPs published for proactive defense

This breach highlights how even security vendors are now being targeted by advanced threat actors — especially those with deep access to enterprise infrastructure.

At @Efani, we believe that protecting mobile and cloud infrastructure isn’t optional anymore. It’s mission-critical.

No system is immune. But full transparency and rapid action — like Commvault demonstrated — sets the standard for how we fight back.

Zerodays sind überwiegend staatlichen Akteuren zu verdanken | heise online
https://heise.de/-10367137 #Zeroday #0day

Zerodays sind überwiegend staatlichen Akteuren zu verdanken | Security https://www.heise.de/news/Steuergeld-finanziert-Angriffe-mit-Zerodays-10367137.html #0day #Zeroday #exploit #China #Russland #Russia #SouthKorea #NorthKorea #Windows #MicrosoftWindows #Android #Google : iOS #Apple

Google: 97 #zeroday #exploits in #2024, over 50% in #spyware attacks
They noted that cyber-espionage threat actors—including government-backed groups and commercial #surveillance vendors' customers—were responsible for more than half of attributable #0day attacks in 2024.
End-user platforms and products (e.g., web browsers, mobile devices, and desktop operating systems) made up 56% of the tracked #zerodays.
https://www.bleepingcomputer.com/news/security/google-97-zero-days-exploited-in-2024-over-50-percent-in-spyware-attacks/

#Government #Hackers Behind Most 2024 #ZeroDay Attacks, #Google Flags 23 #StateSponsored Cases, 8 #Spyware-Based

https://www.digitalinformationworld.com/2025/04/government-hackers-behind-most-2024.html

#Google : Governments are using zero-day #hacks more than ever
#zeroday #security

https://arstechnica.com/security/2025/04/google-governments-are-using-zero-day-hacks-more-than-ever/

Eine neue Analyse zeigt: Steuergeld finanziert mehr als 2/3 der aktiven Zeroday-Angriffe 2024! Staaten wie China, Nordkorea & Co. nutzen gefährliche Sicherheitslücken, um zu spionieren oder Profit zu machen. Besonders betroffen sind Windows & Unternehmensnetzwerke. #Cybersecurity #Zeroday #ITsicherheit #Spionage #Hacker #Steuergeld #newz

https://www.heise.de/news/Steuergeld-finanziert-Angriffe-mit-Zerodays-10367137.html

Kurzlink: https://heise.de/-10367137

Oligo: Wormable Zero-Click Remote Code Execution (RCE) in AirPlay Protocol Puts Apple & IoT Devices at Risk https://www.oligo.security/blog/airborne #cybersecurity #infosec #zeroday #IoT #Apple @catsalad

Google Threat Intelligence Group (#GTIG) tracked 75 actively exploited zero-day flaws in 2024
https://securityaffairs.com/177180/hacking/google-threat-intelligence-group-gtig-tracked-75-actively-exploited-zero-day-flaws-in-2024.html
#securityaffairs #hacking #zeroday

Breaking news. Spain, Portugal and parts of France hit by massive power outage

""Such a widespread grid failure is extremely unusual and could be caused by a number of things: there could be a physical fault in the grid which brings down power, a coordinated cyber attack could be behind it, or a dramatic imbalance between demand and supply has tipped the grid system over the edge," Taco Engelaar, managing director at energy infrastructure experts Neara told Euronews."

https://www.euronews.com/my-europe/2025/04/28/spain-portugal-and-parts-of-france-hit-by-massive-power-outage?utm_source=firefox-newtab-en-us

Huge power cut causes chaos in Spain and Portugal as trains, traffic lights, and payments hit

https://www.bbc.co.uk/news/live/c9wpq8xrvd9t

‘Hunger Games: Sunrise On The Reaping’ Movie Taps Jesse Plemons To Play Plutarch Heavensbee In Lionsgate Adaptation
#Casting #JessePlemons #TheHungerGamesSunriseontheReaping #ZeroDay

https://deadline.com/2025/04/hunger-games-sunrise-on-the-reaping-jesse-plemons-1236377081/

JPCERT/CC Eyes: DslogdRAT Malware Installed in Ivanti Connect Secure https://blogs.jpcert.or.jp/en/2025/04/dslogdrat.html

More:

The Hacker News: DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks https://thehackernews.com/2025/04/dslogdrat-malware-deployed-via-ivanti.html @thehackernews #cybersecurity #Infosec #Ivanti #zeroday #malware

Watching episode 1 of #ZeroDay with Robert Di Nero.

At the 27:56 mark he's walking down a corridor and his legs are very odd. Almost like he's had a stroke. But more importantly, why are his pants so short??!

Windows NTLM flaw (CVE-2025-24054) is under active exploitation! Learn how this critical vulnerability impacts your security and what you can do to stay safe.

#CyberSecurity #InfoSec #ThreatIntel #Vulnerability #WindowsSecurity #CVE #ZeroDay #SecurityNews

Learn more: https://zerodaily.me/blog/2025-04-18-windows-ntlm-cve-2025-24054-under-active-exploitation

Ein bekannter schickte folgende Nachricht:

"Hi,

Live from Belgium, all the public services of the French part of the country (Wallonia) are offline because a very serious intrusion has been discovered yesterday evening.

A friend told me it’s due to an exploited #zeroday #vulnerability in a Ivanti #VPN endpoint."

Es sieht so aus als wenn er recht hat DNS Auflösung und direkte ansprache via IP ist nicht möglich.

Apple just patched CVE-2025-31200 in CoreAudio & CVE-2025-31201 in RPAC, both zero-day flaws exploited in targeted iOS attacks. Update to iOS 18.4.1, iPadOS 18.4.1, & macOS Sequoia 15.4.1 ASAP! More info: https://cyberinsider.com/apple-fixes-two-new-zero-day-flaws-exploited-in-targeted-ios-attacks/ #AppleSecurity #ZeroDay #CyberSecurity #newz

Ein #Cyberangriff auf die Autovermietung #Hertz hat zur Veröffentlichung sensibler #Kundendaten geführt.

Betroffen sind u. a. #Zahlungsinformationen, #Führerscheindaten und Angaben zu #Unfallverletzungen.

Der Angriff nutzte Zero-Day-#Schwachstellen der #Datenplattform von #CleoCommunications.

Die Hackergruppe #Clop wird für den Vorfall verantwortlich gemacht.

https://www.golem.de/news/datenleck-bei-autovermietung-prominente-hacker-erbeuten-kundendaten-von-hertz-2504-195401.html