Do Son ReversingLabs has uncovered a sophisticated malicious campaign targeting the NuGet package manager, a widely-used platform
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Fabasoft has released security advisories addressing a high-severity vulnerability (CVE-2024-4367) in the widely used PDF.js library
Forcepoint X-Labs has unveiled a new ransomware strain dubbed "ShadowRoot" specifically targeting Turkish businesses
Juniper Networks has issued patches to address five vulnerabilities discovered within its Junos OS Evolved operating system
A critical vulnerability in PHP, designated CVE-2024-4577, has become a prime target for cybercriminals within a day of its public disclosure
While initially focused on the mining sector, Cofense's report reveals that Poco RAT malware has expanded its reach into other industries
Japanese organizations are being targeted by the notorious North Korean advanced persistent threat (APT) group, Kimsuky
Kolte, who reported the CVE-2024-39202 flaw to D-Link, also published detailed technical information and a proof-of-concept (PoC) exploit code
Cloud Software Group has issued a security advisory warning customers of a critical vulnerability (CVE-2024-6387) in OpenSSH
DarkGate has reemerged, leveraging a clever combination of Microsoft Excel files and public Samba shares to distribute its malicious payload
The most alarming of these flaws are CVE-2024-4879 and CVE-2024-5217, both carrying a critical CVSSv4 score of 9.3 and 9.2, respectively
These vulnerabilities, identified as CVE-2024-6422 and CVE-2024-6421, pose significant risks, including information disclosure
ASEC reveals new cyberattacks utilizing a novel method to distribute the AsyncRAT remote access trojan (RAT)
Session Hijacking: Unauthorized users may hijack console sessions, gaining elevated privileges (CVE-2024-36451).
CVE-2024-5910 affects Expedition configuration management tool and could allow an attacker with network access to take over admin accounts
Resurgence of Mirai botnet variants, coupled with AI-enhanced DDoS attacks, underscores the critical need for robust cybersecurity measures
The lighttpd project has now obtained CVE-2018-25103 to formally identify the vulnerability and alert supply-chain partners
Group-IB provides a detailed examination of this breach, shedding light on the tactics employed by the emerging threat actor known as EstateRansomware
CVE-2024-6385 enables attackers to impersonate other users and run arbitrary pipeline jobs, posing a significant risk
These vulnerabilities, assigned CVEs 2024-28747 through 2024-28751, could allow attackers to seize control of affected devices
Recorded Future's Insikt Group has exposed "Vortax," as a sophisticated front for a massive malware operation targeting cryptocurrency users
Security researcher Janggggg has disclosed PoC exploit code for three vulnerabilities (CVE-2024-38023, CVE-2024-38024, CVE-2024-38094)