Do Son Microsoft exposes a campaign using trojanized installers. See how Inno Setup trojanized installers silently deploy WorldProxyPool, BOINC, and adware.
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Apple announced automated iCloud public link scanning starting in iOS 27.3, inspecting shared files and disabling end-to-end encryption on public links.
Discord is rebuilding its Discord Rust desktop client with GPUI, ditching Electron to slash memory consumption and share native code with mobile.
Microsoft patched Windows Paint RCE vulnerability CVE-2026-83844 with an 8.1 CVSS score. Update now to block potential remote code execution attacks.
OpenAI GPT-6 Cyber advances cybersecurity research by finding software flaws and strictly obeying mission boundaries.
Google is testing Chrome tab scrolling in Canary, letting users navigate crowded tabs via mouse wheels, gestures, and dedicated scroll arrows.
A DigiCert data exposure revealed customer records and IDs after an internal business system breach. Learn what was exposed and how it was fixed.
CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.
Microsoft launches Windows 11 Cloud Rebuild, a native recovery tool that downloads fresh system images and drivers directly from the cloud without USB media.
Patch ManageEngine Key Manager Plus, Log360, and PAM360 now to fix CVE-2026-77690, CVE-2026-13594, and nine other critical and high flaws.
Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.
46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.
Update Alpine Linux OpenSSH servers to OpenSSH 10.6p2 now to fix a critical password authentication bypass affecting passwordless accounts.
Apple announced steep internal AI budget cuts, curbing daily token allowances for engineers as corporate technology spending faces tighter scrutiny.
Every day, security teams are asked to pay attention to a steady stream of digital warnings, each...
OpenAI launched ChatGPT Images 2.6, introducing animated GIF generation, frame-by-frame editing, and dedicated Flare and Sunburst developer APIs.
OpenAI revealed that ChatGPT search volume now equals 20% of Google Search, with weekly active users climbing to 1.2 billion across global markets.
Sekoia uncovered an APT29 watering hole campaign mobile exploits operation using Plerdy analytics and watering holes to compromise unpatched phones.
Postman AI plugin hijacking sparks controversy after the desktop app silently modifies Codex and Claude Code configs to favor its own tools.
Google defended its policy for Google Search in schools after critics claimed students must accept embedded AI to access essential web research tools.
Cato CTRL exposed the MuddyWater SimpleHelp campaign in Israel using tax lures. Learn how the MuddyWater SimpleHelp campaign abuses RMM tools.
Morphisec exposes a LuaJIT XLoader infostealer campaign. Learn how the XLoader infostealer abuses JScript and shared-section injection.