Do Son Trusted locations" was Microsoft's countermeasure to prevent Visual Studio projects from being used maliciously to achieve RCE
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Financial Conduct Authority (FCA), announced a penalty for Equifax Ltd., amounting to over £11 million (equivalent to 13.4 million dollars)
An independent digital security researcher has unveiled a glitch within the governmental website of West Bengal, India.
CISA and FBI fresh insights were furnished about the tools employed by malefactors associated with the AvosLocker ransomware
In February 2021, security expert Joshua Rogers undertook an analysis of Squid, discerning 55 vulnerabilities within the project's code.
This threat is a concealed malware introduced by an attacker under the pseudonym "kohlersbtuh15" via the PyPi package manager.
The Akira ransomware underscores the evolving threat landscape, emphasizing the need for robust cybersecurity measures.
The victim's computer is infiltrated with remote access trojans known as LummaC2 and RecordBreaker (also referred to as Raccoon Stealer V2)
US Navy serviceman, Wenheng Zhao, has confessed to selling American military secrets to a Chinese intelligence operative
Simpson Manufacturing has disclosed a cybersecurity incident disrupting the company's operational cadence.
Malicious actors behind the ShellBot botnet are employing hexadecimal-converted IP addresses to infiltrate vulnerable SSH Linux servers
Microsoft has announced its phased intent to move away from NTLM authentication in Windows 11 in favor of Kerberos
In a stark reminder of the constantly evolving cyber threat landscape, September 2023 witnessed a formidable ransomware attack on the automation giant
Threat actors are actively exploiting a recent vulnerability, CVE-2023-3519, within the Citrix NetScaler Gateway (with a CVSS score of 9.8)
3xp0rt discovered that the full source code of the inaugural version of the HelloKitty ransomware has been unveiled on cybercrime forums
Microsoft relegated VBScript to the Windows Client Deprecated Features list, a catalog of functions that will no longer undergo development
VBA script initiates a series of actions, creating a directory, downloading an AutoIt3 executable, and preparing the ground for the DarkGate malware
Hackers can exploit CVE-2023-43641, to execute malicious code by harnessing Tracker Miners' automatic indexer
Google's research division has unveiled v8CTF, a Capture the Flag (CTF) challenge tailored specifically for its V8 JavaScript engine
Researchers from Cybernews have identified at least 165 exposed networked RTSP cameras in Israel and 29 in Palestine, accessible to anyone
The CVE-2023-44981 vulnerability in Apache ZooKeeper is a critical vulnerability that could allow an arbitrary endpoint
CISA has added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild