zero-day

Илон Маск перепостил сообщения о хакерской атаке на Binance и прокомментировал: "Каждый день — это нулевой день". Нулевой день (zero-day) — это профессиональный термин в области кибербезопасности, который обозначает уязвимость в программном обеспечении, системе или аппаратном обеспечении, для которой разработчики или производители еще не предоставили доступное решение, и злоумышленники могут использовать эту уязвимость для атаки.Причина, по которой это называется нулевым днем, заключается в том, что у производителей нет времени на предварительное исправление, когда уязвимость обнаружена или становится известной (0 дней).

According to Decrypt, Google's Threat Analysis Group confirmed that cybercriminals used an AI model to discover and exploit a zero-day vulnerability in a popular open-source web management tool that could bypass two-factor authentication. Google stated that this is the first time the company has confirmed AI-assisted zero-day vulnerability development in a real-world environment. Before attackers could exploit it on a large scale, Google worked with the affected vendor to patch the vulnerability. Google's report noted that the vulnerability was a logic error, where the software trusted a condition that could bypass two-factor authentication. Unlike traditional scanners that look for crashes or error codes, AI analyzed the expected behavior of the software and detected logical contradictions, allowing attackers to bypass security checks without compromising encryption.

Litecoin disclosed in a post on platform X that a recent zero-day vulnerability had caused a DoS attack, affecting the operation of major mining pools. Mining nodes that were not updated allowed an invalid MWEB (MimbleWimble Extension Block) transaction to be executed, enabling the related tokens to be withdrawn to a third-party DEX.The Litecoin network rolled back these invalid transactions through a reorganization (reorg) of 13 blocks, confirming that they would not be included in the main chain. All valid transactions during this period were unaffected, and the vulnerability has been completely fixed, with network operations restored to normal.

ChainCatcher message, according to Lookonchain security alert, Apple has fixed a critical zero-day vulnerability (CVE-2025-43300) in the ImageIO framework, which has been widely exploited.Update to iOS 18.6.2 / iPadOS / macOS immediately, or face the risk of attacks through malicious images.

ChainCatcher message, Slow Mist released a security alert stating that Google Chrome (@googlechrome) has released an emergency patch to fix a high-risk zero-day vulnerability (CVE-2025-5419) that has been found to be actively exploited. The flaw exists in the V8 JavaScript engine, allowing remote attackers to compromise memory through a crafted HTML page.Please update to: Chrome 137.0.7151.68/.69 (Windows/macOS)Chrome 137.0.7151.68 (Linux)Users of Chromium-based browsers (such as Edge, Brave, Opera, Vivaldi) should also update as soon as the patch is available. Stay safe and update promptly.

ChainCatcher message, Microsoft cybersecurity researchers have discovered a zero-day vulnerability in the Chromium engine, which powers browsers like Chrome. This vulnerability has been exploited by a North Korean hacker group known as Citrine Sleet, specifically targeting cryptocurrency users. Citrine Sleet has used a rootkit malware called FudModule to create fake cryptocurrency trading platform websites, luring users into downloading malware or weaponized cryptocurrency wallets, thereby gaining remote code execution access to steal the victims' crypto assets. This vulnerability was patched on August 21, and users are urged to update their browsers as soon as possible to ensure safety. This is the third exploited Chromium zero-day vulnerability this year.

ChainCatcher message, the Web3 security agency Wallet Guard stated that Google has released an emergency update for a new zero-day vulnerability (CVE-2023-7024) and recommends users to update their Chrome browser (including Brave, Opera, and Edge) in a timely manner.

ChainCatcher message, Fantom Foundation Telegram community administrator Jane stated that due to a zero-day vulnerability on Google Chrome, some hot wallet assets of the Fantom Foundation have been depleted, with losses amounting to hundreds of thousands of dollars. They are currently actively tracking the movement of the lost funds. Most of the foundation's assets are stored in cold wallets and remain unaffected. Jane recommends that users upgrade Chrome to the latest version.According to CertiK monitoring, some wallets of the Fantom Foundation on Ethereum and Fantom have been attacked, with confirmed losses amounting to $657,000.

ChainCatcher news, according to a report by the security company BleepingComputer, Google has released an emergency security update to fix the fourth Chrome zero-day vulnerability exploited in attacks since the beginning of this year, with active attacks targeting CVE-2023-4863 now reported in the wild.The new version is being rolled out to users in the stable and extended stable channels, and is expected to reach the entire user base in the coming days or weeks. Chrome users are advised to upgrade their web browsers to 116.0.5845.187 (Mac and Linux) and 116.0.5845.187/.188 (Windows).

ChainCatcher news, Zhao Changpeng tweeted that the zero-day vulnerability disclosed by Fireblocks exists in Binance's open-source TSS library, which has now been fixed, and no user funds were affected.Previous news, Fireblocks disclosed a "zero-day" vulnerability that could allow hackers to "withdraw funds from millions of retail and institutional customers' wallets in seconds."

ChainCatcher news, the encrypted custody provider Fireblocks has disclosed a series of "zero-day" vulnerabilities (collectively referred to as "BitForge") affecting various popular cryptocurrency wallets that use multi-party computation (MPC) technology.Currently, Fireblocks has collaborated with Coinbase, ZenGo, and Binance (the three companies most affected by BitForge) to address the potential vulnerabilities. Although users are unlikely to be impacted by these vulnerabilities, Fireblocks stated that if left unpatched, they could allow hackers to "withdraw funds from millions of retail and institutional customers' wallets in seconds."Additionally, Fireblocks has indicated that it has been working to identify other teams that may be affected and has reached out to them according to the "industry-standard 90-day responsible disclosure process."

Chaincatcher news, the Chrome browser has released an emergency update for version 105.0.5195.102 (Mac, Linux, and Windows) to fix a new high-severity zero-day vulnerability, identified as CVE-2022-3075, caused by insufficient data validation in the Mojo runtime library collection. Over the past three months, multiple zero-day vulnerabilities have been discovered in the Chrome browser. (Source link)