Do Son CVE-2023-46748 allows attackers with remote access to the configuration utility to view, add, modify, or delete information in a database
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Lazarus group, with its sophisticated methods and unwavering motivations, continues to be a formidable adversary in the digital realm
APT28 has been assailing governmental entities, businesses, universities, research institutions, and analytical centers in France
To gauge the potential impact of CVE-2023-46604, Qi Anxin CERT replicated the Apache ActiveMQ remote code execution vulnerability
A local privilege escalation (CVE-2023-34057) bug has been discovered in VMware Tools, specifically targeting the macOS operating system
CVE-2023-5815 has been discovered in the plugin that could allow unauthenticated attackers to execute arbitrary code on vulnerable websites
Seiko, announced that a ransomware incident first reported this summer resulted in the exposure of approximately 60,000 personal data entries of its clients
CloudFlare had mitigated thousands of volumetric HTTP Distributed DDoS attacks that exploited the disclosed vulnerability known as HTTP/2 Rapid Reset
IMAPLoader is a .NET-based malware designed to identify victim systems using standard Windows utilities. It operates as a loader
StripedFly malware is capable of executing diverse attacks and boasts numerous modules, making it a versatile tool for malefactors
According to a recently published report by the NCC Group, this past September marked a historic peak in ransomware incidents
By tapping into PAM's APIs, malware can intercept the authentication flow, thereby jeopardizing system security
The vulnerability, CVE-2023-46747, has a CVSS score of 9.8, making it one of the most severe vulnerabilities ever discovered in F5 BIG-IP
Termed 'iLeakage', this side-channel attack is not only practical but requires minimal resources for execution.
In the ever-evolving landscape of cybersecurity, Apple has taken swift action against a zero-day security vulnerability
GoPIX operates as malware pilfering data from the clipboard. It intercepts PIX payment requests and substitutes them with data controlled
The new vulnerability, as revealed by ESET specialists, is identified as CVE-2023-5631 and has a CVSS score of 5.4.
On the competition's inaugural day, security researchers successfully breached the Samsung Galaxy S23 phone twice
CVE-2023-5746 is a critical vulnerability, as it could allow attackers to take complete control of affected devices.
Data brokers, operating in the shadows with little transparency or oversight, amass vast amounts of personal data,...
In the expansive realm of digital marketing, few metrics are as telling or as crucial as keyword...
CVE-2023-5363 is caused by an incorrect cipher key and IV length processing during the initialization of some symmetric ciphers