Do Son The RansomHouse ransomware group exemplifies the sophisticated, profitable, and adaptable nature of modern cyber extortion campaigns
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
If left unaddressed, threat actors could exploit these flaws (CVE-2024-22245 and CVE-2024-22250) to hijack user sessions and infiltrate sensitive systems
The Lazarus Group, a skilled North Korean state-sponsored hacking collective, continues to aggressively target entities in the global defense sector
ConnectWise issued a critical security advisory, exposing two gaping security vulnerabilities in its popular ScreenConnect software
A disclosed vulnerability in Spring Security (CVE-2024-22234) could lead to unauthorized access within affected Java web applications
CVE-2023-49109 could potentially permit a remote attacker to execute arbitrary code on the DolphinScheduler server
These campaigns focus heavily on Latin America, notably targeting victims with the notorious Astaroth, Mekotio, and Ousaban trojans
Key to APT group Earth Preta is a custom malware dubbed DOPLUGS, a critical tool leveraged in a range of recent intrusions.
AsukaStealer, a sophisticated malware, was first unveiled on a Russian-language cybercrime forum. For a monthly fee of $80
Zyxel’s recent security advisory spotlights multiple vulnerabilities present in select firewall and access point models. Failure to...
A recently discovered vulnerability (CVE-2024-1597, CVSS 10) highlights the importance of vigilance and proactive security measures
Autodesk AutoCAD, a widely used CAD software across architecture, and manufacturing industries, has been found to contain 40 zero-day flaws
A flaw (CVE-2024-0646, CVSS 7.8) discovered in the Linux Kernel Transport Layer Security could have been exploited to gain elevated system privileges
UK's National Crime Agency has confirmed that Lockbit's operations have been disrupted due to the international joint law enforcement effort
The Thunderbolt interface has been notably affected, involving both software and firmware vulnerabilities.
The CVE-2024-22030 flaw carries a medium-to-high severity rating and if exploited, a malicious actor to take over existing Rancher nodes.
A PoC was disclosed for a severe design flaw (CVE-2023-50387, KeyTrap) in Domain Name System Security Extensions (DNSSEC)
A critical RCE vulnerability (CVE-2024-25600, CVSS 9.8) has been discovered in the widely used WordPress site builder, Bricks Builder
Italian Computer Security Incident Response Team has issued a critical warning about a resurgence of the "Helpdesk Support" phishing campaign
NIST has assigned CVE-2020-36773 a base score of 9.8 (out of 10) under the CVSS v3.1 system, classifying it as "Critical."
Recently disclosed vulnerabilities (CVE-2023-28078 and CVE-2023-32462) in Dell OS10 Networking Switches pose a severe threat.
According to Qrator Labs, 2023 was a year of marked transformation in the world of Distributed Denial of Service (DDoS) attacks.