Do Son Cybersecurity experts from Kaspersky identified a slew of fresh malware samples linked to the notorious MATA cluster
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Google's TAG identified multiple state-sponsored hacking groups actively leveraging a known vulnerability (CVE-2023-38831) in WinRAR
Miessler believes the vulnerability to be an erroneous configuration in a ServiceNow component or widget named 'Simple List'
attackers can exploit CVE-2023-45727 to transmit Proself account data externally, potentially enabling unauthorized access to Proself.
Researchers from Elastic Security Labs have unearthed a new backdoor, BLOODALCHEMY, employed in attacks against the nations of ASIAN
The digital community has been abuzz with discussions about CVE-2023-43661, which comes with a high CVSS score of 9.1
CVE-2023-45133 can potentially allow attackers to execute arbitrary code during the compilation process of specially crafted malicious code
F-Secure undertook an in-depth examination of the Android spyware, SpyNote, uncovering its vast capabilities for gathering sensitive data
CVE-2023-45158 (CVSS score of 8.1) is an OS command injection vulnerability in the web2py web application framework.
Bearing the identifier CVE-2023-20198, this vulnerability carries a maximum CVSS score of 10, signifying its critical severity.
The vulnerability, CVE-2023-45757, is an XSS vulnerability. XSS vulnerabilities allow attackers to inject malicious code into web pages
The XorDDoS Trojan specifically targets Linux devices, turning them into remote-controlled 'zombies'. Once infected, these devices
Trend Micro has spotlighted a sinister trend: cybercriminals are deploying a pernicious malware named Lumma Stealer via Discord
This vulnerability, CVE-2023-5178, can be exploited by attackers to execute arbitrary code on vulnerable systems.
Alarmingly, this vulnerability is already being exploited in the wild. All HTTP/2 server users in active release lines 18.x and 20.x are susceptible.
Apache InLong is a powerful data integration framework, but it is important to be aware of the security vulnerabilities that exist in the software
According to Valve, fewer than 100 Steam users installed these malware-infested games, and they have already been notified via email.
@po6ix released a proof-of-concept (PoC) exploit for a zero-day vulnerability (CVE-2023-41993) affecting iPhone and Mac users
The premier U.S. cybersecurity agency has announced plans to incorporate a section dedicated to groups deploying malicious...
Canonical retracted the Ubuntu 23.10 images merely hours after their release due to user translations for the Ubuntu installer
According to experts at Check Point, these attacks, orchestrated by the Chinese hacker collective, ToddyCat, have been ongoing since 2021.
The CVE-2023-5360 (CVSS score of 9.8) flaw allows unauthenticated attackers to upload arbitrary files to vulnerable sites