Do Son Resecurity has uncovered a widespread campaign exploiting critical vulnerabilities in ServiceNow, a popular platform for digital workflows
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Google Chrome sends suspicious files to the company's servers for deeper scanning if the user has enabled Enhanced Protection in Safe Browsing
Yehuda Smirnov has uncovered a critical vulnerability in Microsoft's Windows Hello for Business (WHfB) authentication system
Red Art Games has announced that it has fallen victim to a large-scale cyberattack, resulting in the compromise of numerous customer data
Network traffic analysis indicated that the Quad7 botnet is used for Password Spraying attacks on Microsoft 365 accounts
Reddit has implemented a sweeping block on major search engine crawlers, with the notable exception of Google
The most severe vulnerability tracked as CVE-2024-6327, resides in Telerik Report Server, a popular solution for managing business reports
JetBrains TeamCity has been found to contain a high-severity security vulnerability (CVE-2024-41827, CVSS 7.4).
GitLab, the widely-used code collaboration platform, released a security update today that addresses a half-dozen vulnerabilities
The vulnerabilities, tracked as CVE-2024-37998 (CVSS 9.8) and CVE-2024-39601, affect the firmware of these products.
HotPage installs a driver capable of injecting code into remote processes, along with two libraries that intercept and modify browser network traffic
ISC, the maintainers of the widely-used BIND DNS server software, has released security updates to address four high-severity vulnerabilities
Engineers at Southwest Research Institute (SwRI), located in Texas, discovered a vulnerability in fast charging stations for electric vehicles
The espionage group Daggerfly has also introduced a new Windows backdoor, Trojan.Suzafk, first documented by ESET in March 2024
Suffolk County, New York, has approved an allocation of $25.7 million for recovery efforts following one of the most devastating cyberattacks
A critical vulnerability, designated CVE-2024-39700, has been discovered in the widely-used JupyterLab extension template
KnowBe4, a cybersecurity company, has unveiled an attempt to infiltrate its IT system through a fake employee from North Korea
the EMBAG law was passed and implemented. It now not only mandates the use of open-source software by the Swiss government or its contractors
CrowdStrike, a leading cybersecurity firm, has issued a warning about a new information-stealing malware dubbed "Connecio"
Google Chrome 127 brings a host of improvements, prominently featuring 24 security-related fixes, available for Windows, macOS, and Linux
the issue with CrowdStrike is not limited to the Windows operating system. As early as April this year, Linux users had been reporting kernel crash problems
CVE-2024-3246 allows attackers to inject malicious code into websites, potentially compromising sensitive data