Do Son Taiwan's CERT (Computer Emergency Response Team) has issued a critical security advisory regarding a high-severity vulnerability (CVE-2024-6045)
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The BlastRADIUS vulnerability (CVE-2024-3596) necessitates a MITM position, implying that a network may already be compromised if exploited
Mandiant, a renowned cybersecurity firm, has issued a warning about the evolving tactics of the financially motivated threat group UNC3944
The flaw, identified as CVE-2024-3105, allows remote code execution (RCE) and poses a severe risk to websites using this plugin
Volexity has revealed a new cyber-espionage campaign targeting Indian government entities, employing a custom-built malware dubbed DISGOMOJI
CVE-2024-3912 (CVSS 9.8) is an arbitrary firmware upload flaw that can be exploited by remote attackers without requiring authentication
TRU has uncovered a new campaign by the SolarMarker threat group, which involves the impersonation of the global employment website Indeed
New Cryptojacking Campaign suspected to be an evolution of the previously identified Spinning YARN operation
CVE-2024-3080 with a CVSS v3.1 score of 9.8, allows unauthenticated remote attackers to gain control of the affected devices
A security researcher has published PoC code targeting a recently patched high-severity vulnerability in Microsoft Windows (CVE-2024-26229)
Hundreds of fraudulent websites have been identified, falsely claiming to sell tickets to the Paris 2024 Summer Olympic Games
A high-severity vulnerability, identified as CVE-2022-23829 (CVSS 8.2), has been discovered in various AMD processors
A new phishing technique exploiting Progressive Web Apps (PWAs) has been brought to light by cybersecurity researcher Mr.d0x
ASEC has disclosed a new cyberespionage campaign attributed to the North Korean state-sponsored group Kimsuky
cybersecurity researchers have unveiled a sophisticated new backdoor, dubbed "BadSpace," that poses a significant threat to internet users
A recent analysis by security researcher Jacob Malimban at Cofense has revealed a resurgence in activity from the STR RAT malware
TAG and Mandiant's frontline intelligence team have detailed the unique and intricate cyber threat landscape facing Brazil
Google has released a critical security update for Pixel devices, addressing a zero-day vulnerability (CVE-2024-32896)
A security researcher has published details and proof-of-concept (PoC) exploit code for a critical vulnerability (CVE-2024-37051)
The campaign begins with a seemingly innocuous phishing email containing an HTML attachment disguised as a routine document
CVE-2024-35213 could allow attackers to trigger a denial-of-service (DoS) condition or even execute malicious code on affected systems.
Dubbed the "Smishing Triad," this group is leveraging stolen databases and impersonating Pakistan Post to defraud unsuspecting victims