Do Son GitHub has disclosed a critical security vulnerability (CVE-2024-4985) in its self-hosted GitHub Enterprise Server (GHES) product
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
A critical memory corruption vulnerability, dubbed Linguistic Lumberjack (CVE-2024-4323), has been uncovered in Fluent Bit
The first vulnerability, tracked as CVE-2023-43208 (CVSS 9.8), affects NextGen Healthcare's Mirth Connect.
The attackers exploited a known flaw in Microsoft Exchange Server, known as ProxyShell, to inject the keylogger into the server’s main page
CVE-2024-4709, CVE-2024-2771, and CVE-2024-2782, range from cross-site scripting (XSS) to unauthorized access and privilege escalation
Security researchers at Intego have uncovered a new variant of the "Cuckoo" Mac malware, a strain of the notorious Atomic macOS Stealer
CVE-2024-34359 allow attackers to execute arbitrary code on systems using the library, leading to data breaches and system compromise
A new report reveals a disturbing trend in cyber attacks: the increasing use of Microsoft OneNote files to deliver malicious payloads
CVE-2024-3368 enables attackers to inject malicious code into websites, potentially leading to unauthorized access, data theft
A new wave of cyberattacks targeting financial institutions has been uncovered, with the notorious Metamorfo banking Trojan at its center
A proof-of-concept (PoC) exploit code for a recently patched zero-day CVE-2024-4947 vulnerability in Google Chrome has surfaced
Cybersecurity researchers at Elastic Security Labs have issued a warning about the increasing prominence of LATRODECTUS, a malware loader
In addition to the technical details, Murali crafted a proof-of-concept (PoC) exploit for CVE-2024-32002 to demonstrate the RCE.
The North Korean state-sponsored group Springtail (also known as Kimsuky) has added a new Linux backdoor, dubbed Gomir, to its arsenal
Tracked as CVE-2024-34082 (CVSS 8.5), the vulnerability stems from Grav's use of the Twig templating engine.
This novel use of Tesseract is part of a broader strategy by ViperSoftX to install additional malware strains, including Quasar RAT
A recent analysis by S-RM, a global cybersecurity consultancy, has shed light on the escalating sophistication of...
A series of critical vulnerabilities have been discovered in the XStore theme and its accompanying XStore Core plugin
Exploiting CVE-2024-22120 allows attackers to dump any values from the database, including sensitive information
Each tasked with managing activities and establishing communication with compromised IPs to facilitate the distribution of XMRig cryptominers
Bryan Smith shared the technical details and a proof-of-concept (PoC) for CVE-2024-22026 in Ivanti's Enterprise Mobility Management Platform
The flaw, tracked as CVE-2024-22476, could allow an unauthenticated attacker to “enable escalation of privilege via remote access”.