Do Son FortiGuard Labs has recently identified a new phishing campaign deploying a variant of the notorious Agent Tesla malware
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Bitdefender, a leading cybersecurity provider, has addressed a vulnerability (CVE-2024-4177) in its GravityZone Console On-Premise product
eSentire's Threat Response Unit (TRU) has unveiled a persistent and sophisticated cyber campaign employing the notorious more_eggs malware
A critical vulnerability (CVE-2024-5480) has been discovered in PyTorch's distributed RPC (Remote Procedure Call) framework
TRU has unveiled a sophisticated attack campaign utilizing counterfeit KMSPico activators to deliver the notorious Vidar Stealer malware
chip design giant Arm has disclosed a critical zero-day vulnerability (CVE-2024-4610) actively being exploited in the wild
watchTowr published the technical details and a PoC exploit code for a recently disclosed critical vulnerability (CVE-2024-4577) in PHP
The vulnerability, tracked as CVE-2024-4577, could potentially allow unauthenticated attackers to take full control of affected PHP servers
Sophos researchers have uncovered a sophisticated and long-running cyberespionage campaign, dubbed Operation Crimson Palace
The attack begins with hackers compromising websites and inserting malicious code, often through the legitimate WordPress plugin "Hustle."
CVE-2023-33246 in RocketMQ versions 5.1.0 and below, allowing attackers to remotely execute code and download the notorious Muhstik malware
The vulnerabilities, tracked as CVE-2024-20404 and CVE-2024-20405, could be exploited by unauthenticated, remote attackers to carry out SSRF and stored XSS attacks
Researchers have identified a concerning resurgence of attacks targeting known vulnerabilities in the ThinkPHP web application framework
Trustwave SpiderLabs has uncovered a dangerous cyberattack campaign targeting users of the popular network scanning tool, Advanced IP Scanner
ReversingLabs researchers uncovered a malicious open-source package on the Python Package Index (PyPI) called xFileSyncerx
RansomHub attackers gained initial access by exploiting the Zerologon vulnerability (CVE-2020-1472), which grants domain administrator privileges
Cybersecurity researchers have uncovered a novel cryptojacking campaign dubbed "Commando Cat," actively targeting Docker Remote API servers
The impact of CVE-2024-5171 and CVE-2024-5197 is significant due to the widespread use of libaom and libvpx in various applications
A CoinMiner, a type of malware that hijacks systems to mine cryptocurrency, unwittingly left a backdoor open
A massive DNS probing operation, dubbed "Secshow," has been underway since June 2023, targeting open DNS resolvers worldwide
ASEC has recently identified a phishing campaign leveraging HTML files distributed via email to execute malicious commands on targeted systems
This vulnerability, designated as CVE-2024-4295, carries a severity rating of 9.8 (CVSS), making it a prime target for exploitation