Do Son Ikaruz Red Team has been active in the Philippines, conducting attacks through various methods including defacements, small-scale DDoS attacks
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The vulnerability in question (CVE-2020-17519) is a directory traversal flaw that allows attackers to read arbitrary files
A critical vulnerability, designated CVE-2024-4978, has been discovered in Justice AV Solutions (JAVS) Viewer software
CVE-2024-20360, carries a CVSS score of 8.8, signifying a high severity level and the potential for widespread exploitation.
Sonatype has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-4956) in Nexus Repository
CVE-2024-36080 and CVE-2024-36081, pose significant risks to affected systems and necessitate immediate attention and action
The severity of CVE-2024-29269 is further highlighted by the recent publication of a proof-of-concept (PoC) by security researcher Chocapikk.
UAC-0006 is known for its use of the SMOKELOADER malware, a versatile tool often used to deliver additional malicious payloads
The most severe vulnerability, CVE-2024-4835 (CVSS 8.0), involves a cross-site scripting (XSS) flaw in the code editor on gitlab.com
The vulnerability (CVE-2024-33899 for Linux/Unix, CVE-2024-36052 for Windows) poses a greater threat on Linux and Unix
SamsStealer casts a wide net, targeting a broad spectrum of applications and platforms to maximize its data collection potential
The CVE-2024-31989 vulnerability affects anyone who does not have strict access controls on their Redis instance
CVE-2024-21683 allow attackers to seize control of affected systems, potentially leading to data breaches and operational disruptions
CVE-2024-22273 affects VMware ESXi, Workstation, and Fusion—foundational tools for virtual machine creation and management
The ability for unauthenticated attackers to execute arbitrary code (CVE-2024-29822 through CVE-2024-29827) could lead to complete system takeover
CRIL identified a sophisticated campaign employing a tiny, stealthy backdoor, now suspected to be the work of the infamous Turla APT group
The impact can be significant, particularly for flaws CVE-2024-29849 and CVE-2024-29850, which allow unauthorized access and account takeover
These Docusign Phishing Templates are being traded on cybercrime forums, particularly on a Russian cybercrime forum
Horizon3.ai published the technical details and a proof-of-concept (PoC) for a critical unauthenticated RCE vulnerability (CVE-2023-34992)
The emergence of Void Manticore and its collaboration with Scarred Manticore underscores the escalating threat posed by state-sponsored cyber actors
Elastic Security Labs has shed light on a complex and insidious crypto-mining operation codenamed REF4578, with its core payload, GHOSTENGINE
Codean Labs published the technical details and a proof-of-concept (PoC) exploit code for a high-severity CVE-2024-4367 vulnerability