Do Son A critical Comet Backup RCE vulnerability has been found. Learn about the CVE-2026-32999 patch released to secure backup servers and user data.
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Bad actors are running FIFA website spoofing scams. Read the latest FBI World Cup alert to stay safe from fake ticket sites and data theft.
The SolyxImmortal info stealer targets user data. Learn how this Python malware steals passwords and abuses Discord webhooks to exfiltrate files.
A massive elderly lottery fraud scam broker receives a prison sentence for a DOJ wire fraud conspiracy that targeted millions.
Cybercriminals are ramping up football fan scams and World Cup 2026 fraud. Protect yourself from fake merchandise, phishing, and lottery traps today.
A newly fixed Apache Ignite vulnerability allows arbitrary file read attacks via path traversal. Learn how to secure your database immediately.
Intrinsec uncovers how abusive bulletproof hosting networks host dangerous malware infrastructure distributing malicious JavaScript payloads.
IBM released a critical WebSphere remote code execution update. Apply the request smuggling patch immediately to protect your server environment.
Microsoft uncovers a massive npm dependency confusion attack targeting enterprise infrastructure. Learn how these malicious packages discovered run code.
The PAN-OS authentication bypass flaw is actively exploited in the wild. Learn how to secure your GlobalProtect VPN gateways today.
A Romanian hacker sentenced to prison following an identity theft conviction and selling access to a US government network infrastructure.
Microsoft rolls out a major Copilot Microsoft 365 redesign. Discover the clean, monochromatic workspace, unified sidebar layout, and dynamic prompt surface.
FortiGuard Labs exposes a highly evasive PureLogs info stealer campaign utilizing process hollowing and fileless execution.
Discover how the Chinese PhaaS ecosystem uses real-time interception and AI automation to bypass MFA and exploit digital wallets.
Learn how the Red Lamassu threat actor targets telecom networks with the newly discovered JFMBackdoor malware framework.
Fox-IT uncovers a sophisticated Lazarus memory-only toolset used to compromise financial firms via an evasive three-stage malware pipeline.
Stay secure with the latest Oracle security patch updates. Learn how these fixes address critical software vulnerabilities across multiple enterprise platforms.
A critical npm supply chain attack exploits lookalike packages to distribute credential harvesting malware. Learn how to protect your cloud assets.
Discover how the critical KubeVirt privilege escalation flaw (CVE-2026-7374) allows container runtime hijacking and creates a cluster takeover risk.
Frustrated by Google’s un-toggleable AI changes? A massive DuckDuckGo No-AI search surge proves iOS users are ditching AI Overviews for classic web results.
The Samba Team dropped fixes for critical Samba vulnerabilities. Read about the remote code execution flaws carrying perfect 10.0 CVSS scores.
Discover the latest Jenkins plugin security flaws. Learn how unvalidated LDAP referrals and arbitrary file reads impact your controller servers.