Do Son Let's Encrypt has announced its intention to discontinue support for the Online Certificate Status Protocol (OCSP) in favor of CRLs
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The vulnerabilities, identified as CVE-2012-4792 and CVE-2024-39891, pose significant risks to users and organizations
Docker has issued a security advisory for a critical vulnerability (CVE-2024-41110) affecting certain versions of Docker Engine.
CVE-2024-40075 is an XML External Entity flaw that could potentially allow attackers to execute arbitrary commands and access sensitive data
Esparza pleaded guilty in March, with charges filed in February. The FBI investigated the case as part of Operation PowerOFF
CVE-2024-6793 and CVE-2024-6794, carry the highest possible severity score of 9.8 on the Common Vulnerability Scoring System (CVSS).
Researchers found advertisements offering a specialized tool for bypassing security systems called AvNeutralizer
Experts have uncovered PyPI packages containing a malicious script in the "init.py" file that transmits user data to a Telegram bot
a 17-year-old youth from Walsall has been detained, suspected of belonging to the notorious cybercriminal group Scattered Spider
R0bl0ch0n TDS represents a sophisticated infrastructure comprising numerous domains and dedicated servers, securely protected by Cloudflare
The authorities' actions were carried out as part of Operation PowerOff, aimed at curbing the activities of DDoS-for-hire service
all 36 courts of the Superior Court of Los Angeles County were closed to restore systems following a ransomware attack
Oracle has agreed to pay $115 million to settle a two-year class-action lawsuit regarding the improper use of user data.
Wiz has now decided not to proceed with the acquisition by Google and will continue to operate independently
Google announced years ago that it would gradually phase out third-party cookies to prevent direct user tracking by advertising networks
CVSS rates the vulnerability associated with Project resources (CVE-2024-6806) as 9.8, highlighting its potential for severe impact
USDC and USDT totaling over $7.6 million were withdrawn from the Rho Markets lending protocol, which operates on the Scroll blockchain
Okta has released a fix for the CVE-2024-0981 vulnerability in Okta Browser Plugin version 6.32.0 for Chrome/Edge/Safari
The vulnerability, tracked as CVE-2024-33352, could allow attackers to gain full control of a victim's computer if exploited.
Rapid7 has released a comprehensive report detailing the evolving TTPs of the Kimsuky advanced persistent threat (APT) group
proof-of-concept (PoC) and technical details for CVE-2024-39911 have already surfaced, raising the specter of widespread exploitation
Cado Security researchers have recently unveiled several campaigns exploiting Cloudflare’s WARP service to attack