Do Son Security researchers at watchTowr Labs have detailed a zero-day vulnerability (CVE-2024-24919) in Check Point's Remote Access VPN appliances
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
A security vulnerability, identified as CVE-2024-22263, has been discovered in Spring Cloud Data Flow, a framework widely used
XLab's CTIA System uncovered the abuse of the Kiteshield packer by various cyber threat actors targeting Linux environments
A critical vulnerability (CVE-2024-4358) has been discovered in Progress Telerik Report Server, a popular report management solution
Rebirth botnet operates as a sophisticated cybercrime enterprise, offering a range of DDoS attack services through a web-based storefront
Cybersecurity firm ReliaQuest has published a detailed analysis of a BlackSuit ransomware attack that occurred in April 2024
Cybersecurity researchers at Zscaler ThreatLabz have uncovered a sophisticated Android banking trojan called Anatsa (also known as TeaBot)
A widespread email scam campaign is targeting students, faculty, healthcare workers, and others with offers of free pianos, leading victims
The vulnerability, tracked as CVE-2024-24919, has been assigned a CVSS score of 7.5, indicating high severity.
Foxit Software, a leading provider of PDF solutions, has issued a security advisory, disclosing actively exploited vulnerabilities...
A distinctive aspect of Operation Diplomatic Specter is the use of previously undocumented backdoors, named TunnelSpecter and SweetSpecter
The flaw, tracked as CVE-2024-5027, could allow an attacker with local access to a Mac device to escalate their privileges to the highest level
Moonstone Sleet deployed a new ransomware variant named FakePenny. This ransomware was used to target a company
Critical Security Advisory: Mitel MiCollab Vulnerabilities Exposed (CVE-2024-35285 & CVE-2024-35286)
Critical Security Advisory: Mitel MiCollab Vulnerabilities Exposed (CVE-2024-35285 & CVE-2024-35286)
The vulnerabilities, tracked as CVE-2024-35285 and CVE-2024-35286, have been assigned the highest severity rating of 9.8 on the CVSS
Netskope Threat Labs has revealed a disturbing trend of malicious actors exploiting Cloudflare Workers to launch sophisticated phishing campaigns
The flaw, designated as CVE-2024-5274 (CVSS 8.8), was recently patched by Google after being exploited in the wild
In a parallel effort, Sharp Dragon targeted governmental organizations in the Caribbean, using compromised networks from Southeast Asia
The vulnerability, designated CVE-2024-26289 and assigned a CVSS score of 9.8 (critical), stems from the deserialization of untrusted data
CVE-2024-5035 allows for remote code execution (RCE) due to command injection and buffer overflow issues in the rftest binary
In the cybersecurity field, web application firewalls (WAFs) are pivotal in defending web applications from malicious attacks....
Forcepoint X-Labs has issued an urgent warning regarding a surge in sophisticated phishing emails targeting government departments across the APAC region
Technical details and a proof-of-concept (PoC) exploit code have emerged about a security flaw (CVE-2024-2961) in GNU C Library