FireEye identifies seven zero-day vulnerabilities used by hackers

FireEye has announced that it has discovered seven zero-day vulnerabilities during the first half of 2013. Each of the vulnerabilities uncovered by FireEye was exploited by advanced attacks across a number of applications, including Microsoft Internet Explorer, Adobe Flash, PDFs, Oracle, and Java, and highlight a growing trend of organizations seeing damage to their reputations and critical infrastructure due to highly publicized zero-day threats.
 
Ashar Aziz, Founder & CTO, FireEye, said, "The newest generation of cybercriminals is persistent, exploiting zero-day vulnerabilities that often leave security experts unaware of the holes in their networks until the damage has already been done. To fill in the gap in network defences, the FireEye technology is able to monitor both inbound and outbound attacks, identifying and blocking the activities of today's most advanced cyber-attacks."
 
The FireEye platform has provided real-time analysis of advanced malware in a controlled environment and uses multi-vector and multi-flow virtual execution to detect next-generation threats that would otherwise go undiscovered.
 
The seven zero-day flaws discovered by FireEye this year include CVE-2012-4792, Internet Explorer; CVE-2013-0422, Java; CVE-2013-0634, Flash; CVE-2013-0640 and CVE-2013-0641, PDF; CVE-2013-1493, Java and CVE-2013-1347, Internet Explorer.