zero day

A zero-day vulnerability in Internet Explorer (IE) leaves the browser open to an attack that could allow someone to capture the keystrokes of a victim.

TippingPoint said a researcher submitted a critical vulnerability affecting Firefox 3.0 to its Zero Day Initiative just five hours after Mozilla released the updated open-source browser Tuesday.In a blog post Wednesday, TippingPoint said its researchers verified the vulnerability it in its lab and quickly reported the flaw to Mozilla’s security team. The flaw could allow [...]  read more »

Researchers discovered more than 200,000 Web pages set up to exploit a zero day in Adobe Flash Player.

Microsoft is investigating reports of a new zero-day vulnerability attackers could exploit to gain extra user privileges and launch malicious code.

Microsoft is investigating reports of a new zero-day vulnerability attackers could exploit to gain extra user privileges and launch malicious code.

A zero-day flaw in the latest version of RealPlayer can be actively targeted with working exploit code, according to researchers at US-CERT.

Skype users will want to upgrade to version 3.6.0.216 for Windows to close a security hole attackers could exploit to run malicious code on vulnerable machines.According to Danish vulnerability clearinghouse Secunia, the problem is an error in the “skype4com” URI handler when processing short string values and can be exploited to corrupt memory. Successful exploitation [...]  read more »

WabiSabiLabi, the eBay-like marketplace for zero-day flaws, will make it tougher for companies to ward off attackers, some IT security professionals say.

wiss start-up WabiSabiLabi is offering zero-day findings for qualified buyers. The site could fuel new debate over about flaw disclosure.