A recent study found a vulnerability in major internet browsers that has existed for 18 years. This vulnerability makes private and corporate networks open to cyberattacks. Researchers from Oligo Security discovered that hackers can take advantage of how browsers handle requests to the IP address 0.0.0.0 by redirecting them to private servers like “localhost.”
The “0.0.0.0 Day” vulnerability involves tricking people into visiting harmful websites. These websites send hidden requests using the IP address 0.0.0.0. This can give hackers access to private data and internal messages of developers. Even more concerning, it can allow hackers to enter victims’ internal networks, making them vulnerable to various types of attacks.
By infosecbulletin
/ Monday , March 31 2025
Canon has announced a critical security vulnerability, CVE-2025-1268, in printer drivers for its production printers, multifunction printers, and laser printers....
Read More
By infosecbulletin
/ Sunday , March 30 2025
RamiGPT is an AI security tool that targets root accounts. Using PwnTools and OpwnAI, it quickly navigated privilege escalation scenarios...
Read More
By infosecbulletin
/ Sunday , March 30 2025
Cybersecurity researcher Jeremiah Fowler recently revealed a sensitive data exposure involving the Australian fintech company Vroom by YouX, previously known...
Read More
By infosecbulletin
/ Sunday , March 30 2025
Safety Detectives' Cybersecurity Team found a forum post where a threat actor shared a .CSV file with over 200 million...
Read More
By infosecbulletin
/ Saturday , March 29 2025
The Federal Bureau of Investigation (FBI) is probing the cyberattack at Oracle (ORCL.N), opens new tab that has led to...
Read More
By infosecbulletin
/ Thursday , March 27 2025
OpenAI has increased its maximum bug bounty payout to $100,000, up from $20,000, to encourage the discovery of critical vulnerabilities...
Read More
By infosecbulletin
/ Thursday , March 27 2025
Splunk has released a security advisory about critical vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. These issues could lead...
Read More
By infosecbulletin
/ Thursday , March 27 2025
As the Eid holidays near, cybercriminals may try to take advantage of weakened security during this time. The CTI unit...
Read More
By infosecbulletin
/ Wednesday , March 26 2025
Operations at Kuala Lumpur International Airport (KLIA) were unaffected by a cyber attack in which hackers demanded US$10 million (S$13.4...
Read More
By infosecbulletin
/ Wednesday , March 26 2025
Unofficial patches are available for a new Windows zero-day vulnerability that allows remote attackers to steal NTLM credentials by deceiving...
Read More
Both individuals and companies that host web servers are vulnerable to potential risks. Researchers have shown that it is possible to execute harmful code on servers using the Ray AI framework. However, this issue applies to any application that can be accessed through the IP address 0.0.0.0.
In June, Google’s security developer found malware abusing this vulnerability. But, Windows users don’t need to worry because Microsoft automatically blocks 0.0.0.0. Apple will block access to 0.0.0.0 in macOS 15 Sequoia beta. Google may do the same for Chromium and Chrome. However, Mozilla is unsure due to compatibility concerns with servers that use 0.0.0.0.
Tech giants are increasingly focusing on cybersecurity. However, researchers warn that leaving the IP address 0.0.0.0 open could pose a significant risk, as it may expose previously protected data.
The findings will be presented at the DEF CON conference in Las Vegas this weekend, providing more information about this important security issue. Stay tuned for updates and strategies to fix this vulnerability.