Do Son CVE-2024-29212 carries a high severity rating with a CVSS score of 8.8, primarily due to its potential to allow remote code execution (RCE)
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Attackers are weaponizing two critical vulnerabilities, CVE-2023-46805 and CVE-2024-21887, to spread the notorious Mirai botnet malware
zEus stealer launches a series of checks to determine if it is under analysis, avoiding detection by comparing the computer name
Designated as CVE-2024-4367 in PDF.js and CVE-2024-34342 in React-PDF, this flaw hinges on the improper handling of JavaScript
The Cuckoo malware infiltrates computers unsuspectingly and exploits their resources to steal information and spy on users.
The attackers then deployed a Perl-based web shell, dubbed ROOTROT, which is linked to the China-based hacking group UNC5221
By following these steps, you can easily protect yourself from becoming a victim of URL phishing attacks and thus enhance your online safety
The technical details and proof-of-concept (PoC) code are now available for a high-severity vulnerability (CVE-2024-21006)
The CVE-2024-4041 vulnerability stems from insufficient input sanitization and output escaping mechanisms within the plugin
TunnelVision, officially cataloged as CVE-2024-3661, exploits a fundamental flaw in how devices on a local network handle routing decisions
Security researchers at Zscaler’s ThreatLabz have uncovered significant updates to the HijackLoader malware, making it far more...
A bespoke backdoor known as Kapeka (also dubbed KnuckleTouch) has been spotlighted for its sophisticated capabilities
The CVE-2024-34456 vulnerability in question allowed for the injection of a custom dynamic library (dylib) into the Antivirus One application
The vulnerability, CVE-2023-49606, poses a severe threat to users of the software's most recent versions, with a CVSS rating of 9.8
Mac users are facing renewed challenges from an insidious form of malware known as the Atomic Stealer, or AMOS
The vulnerabilities, cataloged as CVE-2024-33788 and CVE-2024-33789, both involve command injection exploits
The sophistication of the D3F@ck Loader extends to its management of these payloads. It retrieves a .NET dropper from the C2 server
The vulnerabilities, tracked as CVE-2024-4215 and CVE-2024-4216, both carried a severity rating of 7.4 on the CVSS.
The United States has formally denounced a series of cyberattacks orchestrated by Russia’s GRU, commonly identified as APT28
Hackers are actively exploiting a flaw in the LiteSpeed Cache Plugin for WordPress, a tool installed on over 5 million websites worldwide
CVE-2024-0087 is rated 9.0 on the CVSS scale, involves a vulnerability where users can redirect logging output to any file
CVE-2024-4439 (CVSS score of 7.2) pertains to a stored Cross-Site Scripting (XSS) flaw in the WordPress Core.