Do Son The initial cluster of domain names employed registration methodologies reminiscent of the hacking entity TAG-63
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
iTerm2 existed a CVE-2023-46300 flaw pertaining to how iTerm2 managed certain escape sequences linked to tmux integration
CVE-2023-20273 allows an attacker who has already compromised the device to gain root access and take complete control.
Okta, a purveyor of identity tools such as multifactor authentication and single sign-on for countless enterprises, grappled with a security breach
several compromised accounts lacked the authority to submit such inquiries, and Kodex promptly neutralized these accounts
This is the second, recent incident of threat actors attempting to take advantage of leaked LockBit source code to spin new variants of ransomware
Now, when installing apps from external sources, "Google Play Protect" offers users a full-screen real-time scanning interface
Are you looking for ways to grow your insurance business and maximize sales opportunities? If so, leveraging...
CVE-2023-41895 vulnerability permits users to employ their local credentials and sign in to an external website
Unit 42 have discovered that the cybercrime syndicate, ALPHV/BlackCat, has initiated the deployment of a novel tool dubbed Munchkin
It's worth highlighting that this isn't the inaugural data leak from 23andMe this month. Earlier, a hacker operating under the alias 'Golem'
CVE-2021-1435 provides attackers a door into the system, permitting them to inject arbitrary commands, all executable as the all-powerful root user
This ransomware, named "BlackDog 2023", seemingly had ties to the Lockbit 3.0's leaked source code, pointing to a potentially new ransomware family
A coalition of cyber activists breached the servers of Trigona, an entity known for its development of ransomware software
An attacker could exploit CVE-2023-45802 to exhaust the server's memory. This bug affects Apache HTTP Server versions 2.4.55 through 2.4.57
CVE-2023-5552, as identified in the official vulnerability database, pertains to an information disclosure flaw.
In the case of CVE-2023-46227, an attacker can inject malicious code into a serialized data object and then send that object to an Apache InLong server
Citrix has since revised its recommendations, noting that CVE-2023-4966 exploits were found on unprotected devices.
Know Your Customеr (KYC) verification has become more crucial than еvеr in thе contеmporary corporatе landscapе. It’s,...
Microsoft has flagged two North Korean cyber threats, Diamond Sleet and Onyx Sleet, capitalizing on a vulnerability in the JetBrains
It was discerned that over 40,000 of these relied on default passwords, notably the term "admin" or its variants.
CVE-2023-34050 is a deserialization bug in the Spring AMQP project, which is a popular Java library for developing messaging solutions