Do Son CVE-2024-21687, and CVE-2024-21686 have the potential to compromise sensitive data and disrupt operations for organizations
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
A RCE vulnerability, tracked as CVE-2024-27348, is currently under active exploitation in the wild, targeting Apache HugeGraph-Server deployments
JPCERT/CC has released a comprehensive report detailing ongoing cyberattacks by the notorious MirrorFace LODEINFO and NOOPDOOR malware
CVE-2024-6689 resides within the baramundi Management Agent (bMA) and could enable a local attacker to elevate their privileges
The Phylum Research Team recently uncovered a sophisticated cyberattack targeting developers using the npm package registry
Security researcher John Castro has uncovered a critical vulnerability (CVE-2024-6695) in Profile Builder, a widely used WordPress plugin
CybrX, who reported the CVE-2024-6345 vulnerability, has published a detailed technical analysis and proof-of-concept exploit code
A high-severity vulnerability in the Linux kernel has been found to affect a wide range of Moxa industrial networking and computing products
CosmicSting vulnerability identified as a severe threat to Adobe Commerce and Magento stores, is now actively being exploited in the wild
The Jellyfish Loader was discovered within a ZIP file initially uploaded from Poland. This file contained a Windows shortcut (.lnk)
CVE-2023-41916, CVE-2023-46801, and CVE-2023-49566, could allow attackers to read arbitrary files, execute remote code, and perform JNDI injection attacks
A new, insidious phishing scam targeting employees' Microsoft credentials has been unveiled by cybersecurity experts at Cofense
Adding to the urgency, the proof-of-concept (PoC) exploit code for CVE-2024-36401 has already been published online.
A critical zero-day vulnerability has been identified in Alibaba's Nacos platform, a widely used open-source tool for dynamic service
CVE-2024-6744 has been assigned a critical severity score of 9.8 on the CVSS scale, indicating its high potential impact on affected systems.
Alphabet, Google's parent company, plans to acquire the cybersecurity startup Wiz for $23 billion, with the deal potentially concluding soon.
Squarespace has recently issued a security advisory warning its customers of an ongoing domain hijacking campaign
In a recent vulnerability analysis by SSD Secure Disclosure, critical security flaws were discovered in the SonicWall SMA100 series
Supermicro Computer, a leading provider of server and motherboard solutions, has disclosed a critical security vulnerability (CVE-2024-36435)
MSI has experienced an identical security breach. Specific keywords in search engines can easily locate MSI's after-sales service site
Netgear emphasizes the importance of downloading and installing the firmware updates to mitigate the risks associated with these vulnerabilities
Mitel has issued two critical security advisories warning users of a severe vulnerability in the PHP scripting engine