VMware ESXi zero-days likely exploited a year before disclosure

Chinese-speaking threat actors used a compromised SonicWall VPN appliance to deliver a VMware ESXi exploit toolkit that seems to have been developed more than a year before the targeted ...
Threat Post

Three Exploit Kits Spreading Attacks for Recent Flash Player Zero Day

The Angler Exploit Kit is exploiting the latest Flash zero day and is moving Dridex banking malware. The Magnitude and Neutrino exploit kits have also integrated the 0day. Update Exploits for the most ...
Threat Post

Purple Fox EK Adds Microsoft Exploits to Arsenal

Two exploits for Microsoft vulnerabilities have been added to the Purple Fox EK, showing ongoing development. The Purple Fox exploit kit (EK) has added two new exploits targeting critical- and ...
Computerworld

Experts publish ‘how to’ book for software exploits

A new book by leading security researchers on writing code to exploit security flaws in software, including Microsoft Corp.’s Windows operating system, has raised some eyebrows in the technical ...
Computer Weekly

Leaked SMB exploits make malware powerful, warns Cylance

Exploits of Microsoft’s server message block (SMB) protocol have been an “unmitigated success” for malware writers, according to researchers at security firm Cylance. In April 2017, the Shadow Brokers ...