Do Son Hugging Face, a leading provider of open-source machine learning and AI tools, disclosed a security breach affecting its Spaces platform
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
CVE-2024-3820, rated with a maximum severity score of 10 (CVSS 10), could allow attackers to inject malicious SQL code
BlueDelta even managed to bypass two-factor authentication and CAPTCHA challenges by leveraging compromised Ubiquiti routers
CVE-2024-32850 with a CVSS score of 9.8 (Critical), allows attackers to execute commands remotely or gain unauthorized administrative access.
Designated as CVE-2024-35204, this vulnerability has been assigned a CVSS score of 8.4, indicating its high severity
Krasimir Konov, malware analyst at Sucuri, exposes how hackers are leveraging Telegram's unique features to execute sophisticated website attacks
A new banking Trojan named "CarnavalHeist" is targeting Brazilian users, exploiting the country's festive spirit to steal financial data
The malware file named “.redtail” confirmed the presence of the RedTail cryptominer, previously reported by Cyber Security Associates (CSA)
The malware, identified as an InfoStealer, poses as the official app of Bahrain’s Labour Market Regulatory Authority (LMRA)
Chalubo malware was highly active in late 2023 and early 2024, with over 330,000 unique IP addresses communicating with known C2 servers
A new and sophisticated malware named AsukaStealer has emerged on the cybercrime scene, offering its malicious services
LilacSquid deploys a series of malicious tools, including MeshAgent, a customized version of QuasarRAT, dubbed "PurpleInk,"
ISO 27001 vs. Other Data Security Standards & Regulations: Which One is Right for Your Organization?
ISO 27001 vs. Other Data Security Standards & Regulations: Which One is Right for Your Organization?
we will compare ISO 27001 and other security standards and regulations to help you decide on the right data security standard
A buffer overwrite vulnerability that occurs when NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module
With a CVSS score of 10, CVE-2024-5522 is classified as an SQL Injection (SQLi) vulnerability, a common yet dangerous type of attack
A critical vulnerability (CVE-2024-3273) discovered in multiple end-of-life D-Link network-attached storage (NAS) devices
TIBCO has issued a security advisory warning users of a vulnerability (CVE-2024-4407) in its Managed File Transfer Platform Server
The campaign utilizes a complex DLL side-loading technique involving legitimate files from the IObit anti-malware solution to execute malicious payloads
This flaw, identified as CVE-2024-36383 and rated with a CVSS score of 9.1, could allow attackers to perform arbitrary file deletions
CVE-2024-5296 (CVSS 9.6) - This critical vulnerability allows remote attackers to bypass authentication on affected installations
BitRAT is a powerful remote access tool that grants attackers extensive control over infected systems, enabling them to steal sensitive data
CISA has issued an urgent warning regarding two actively exploited vulnerabilities affecting the Linux Kernel and Check Point Quantum Security Gateways