Do Son MetaStealer found its way into systems primarily through malspam and cracked software distributed via hijacked YouTube accounts.
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The X.Org Server and XWayland have released updates to address two significant vulnerabilities: CVE-2023-6377 and CVE-2023-6478
Proof-of-concept (PoC) exploit code has been published for a Windows kernel vulnerability tracked as CVE-2023-36424.
A new predator lurks - sophisticated threat actors using malicious JavaScript to steal sensitive information
In an era where mobile banking has become the norm, a new threat looms large, especially in India's banking sector - Android phishing.
One of the most alarming aspects of CVE-2023-7024 is that it had been actively exploited in the wild before its discovery.
Identified as CVE-2023-48738 and rated 9.3 on the CVSS scale, this vulnerability was a ticking time bomb in the Porto theme's code.
Magecart, the perpetual phantom haunting e-commerce, continued its reign of terror by exploiting unpatched websites to steal credit card data
a malicious software distribution campaign they uncovered, which uses JavaScript web injections to steal banking data from 40 banks
Neurosurgical Associates of New Jersey announced a security breach wherein an unauthorized malicious actor accessed the email of one of the employees
A staggering 26,447 vulnerabilities were disclosed in 2023, surpassing 2022's total by over 1,500 CVEs.
The discovery of CVE-2023-50917 serves as a stark reminder of the importance of cybersecurity in the realm of smart home automation
In light of a CVE-2023-50164 vulnerability discovered in Apache Struts, Cisco Systems has elucidated the impact on its products.
Unauthenticated attackers can exploit the CVE-2023-6750 (CVSS 9.8) flaw to download database backups made with the plugin.
Tagged as CVE-2023-43826 (CVSS score of 7.5), this security flaw in Apache Guacamole represents a significant threat
The U.S. Department of Justice has announced the FBI's successful infiltration into the infrastructure of the ransomware group ALPHV
Interpol announced that the international law enforcement operation "Operation HAECHI IV," aimed at combating financial crimes online
The Konni group leveraged LNK files, essentially commonplace Windows shortcuts increasingly used by various threat actors,
CVE-2023-49734 vulnerability allows a lower-privileged user, or 'Gamma user,' to gain undue control over chart permissions.
Sophos X-Ops warns that the "Inhospitality" malspam campaign represents a cunning blend of social engineering and malware
the Iranian espionage group Seedworm (also known as Muddywater) has emerged as a sophisticated and elusive adversary
GitHub Gists Abuse: This technique involves using GitHub Gists, a feature for sharing code snippets, to host two-stage malicious payloads.