Do Son Vladimir Tokarev will detail a series of critical zero-day vulnerabilities (OVPNX) in OpenVPN, the world's leading VPN solution
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
CVE-2024-30251, is a denial of service (DoS) issue that allows attackers to incapacitate web services with a single malformed POST request
The report highlights an alarming trend where cybercriminals and Advanced Persistent Threat (APT) groups, such as Pawn Storm
CVE-2024-33530 arises when a user, initially placed in a lobby due to the meeting’s settings, is invited into the main conference room
Microsoft Graph API is being used to facilitate communications with command-and-control (C&C) servers hidden within Microsoft’s cloud infrastructure
Security analyst Ben Martin revealed this insidious new tactic. It starts when you visit a website infected with the Mal.Metrica malware
CVE-2024-32114 has been rated with a severity score of 8.5 on the CVSS scale, indicating a high level of risk.
A CVE-2024-20376 flaw in the web-based management interface could allow attackers to send specially crafted requests
CVE-2024-32971 vulnerability with a CVSS score of 9.1, has been discovered in versions 1.44.0 and 1.45.0 of the Apollo Router
APT42 operations are using two custom backdoors: NICECURL and TAMECAT. These backdoors are delivered via spear phishing
CVE-2024-32962, carries the highest severity score of 10 on the Common Vulnerability Scoring System (CVSS), indicating its critical nature
Dropbox has confirmed a security breach within its Dropbox Sign (formerly HelloSign) service, exposing customer data
Interestingly, there is a noted overlap between Cuttlefish and a previously identified malware cluster known as HiatusRat
Security researchers at SentinelOne have identified new Adload variants that successfully evade Apple's detection mechanisms.
Dirty Stream exploits path traversal vulnerabilities when applications share data using Android's ContentProvider components
HPE Aruba Networking announced a comprehensive update to its ArubaOS software, targeting multiple critical vulnerabilities
Goldoon botnet is ruthlessly exploiting a CVE-2015-2051 vulnerability in D-Link devices to commandeer them for malicious activities
TargetCompany ransomware group is actively deploying Mallox ransomware alongside other malicious tools to exploit vulnerable database servers.
CVE-2024-29010 & CVE-2024-29011 could be exploited by attackers to gain unauthorized access to sensitive data and bypass authentication mechanisms
Cisco Talos have unveiled a coordinated threat actor campaign dubbed "ArcaneDoor," targeting government-owned network devices globally
A comprehensive report has uncovered the money laundering tactics employed by the North Korean hacking collective, Lazarus Group
CVE-2024-27790 could have potentially enabled attackers to gain access to records they should not have been authorized to see or modify.