Do Son
Zero Trust Network Access (ZTNA) is a security model that requires strict identity verification for every user...
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The pharmaceutical industry is a complex and rapidly evolving sector requiring strict regulations and supply chain management...
Among the addressed vulnerabilities, one has been detected under active exploitation in the wild: CVE-2023-29336
AndoryuBot botnet targets the Ruckus vulnerability to access devices, subsequently downloading a script for further propagation
CVE-2023-32233 has been discovered in the Linux kernel, which allows local authenticated users to escalate their privileges on the system.
The CVE-2023-30237 vulnerability was addressed in the 8.3.10.10015 version of CyberGhost, released on February 24, 2023
The flaw in question, CVE-2023-31039, has been classified as "important" in terms of severity and affects Apache bRPC versions 0.9.0 through 1.4.9
McAfee Labs has discovered a new series of phishing attacks that leverage server-parsed HTML files to redirect users to malicious websites
On April 3rd, Western Digital announced the cyberattack; My Cloud for Western Digital NAS devices resumed operation on April 13th
In November 2017 Uber issued a data breach notification concerning the incident. Uber had reached a $148 million settlement agreement
since October alone, Facebook's security analysts have identified approximately ten malware families impersonating ChatGPT and similar tools
Malwareman007 released a PoC exploit for the CVE-2023-27326 vulnerability. The exploit was tested on Parallels Desktop version 18.0.0.
With a high CVSS score of 9.6, the CVE-2023-2478 vulnerability poses a serious risk to the integrity and security of GitLab projects.
The private key (KeyManifest) provided by Intel to OEM has been leaked. These keys pertain to Intel Boot Guard digital signatures
Researcher Xkaneiki developed a PoC exploit for this vulnerability, demonstrating the potential risks posed by CVE-2023-0386
Malicious actors could exploit the CVE-2023-30777 vulnerability by manipulating the $this->view variable from the current_screen function
Trojan called Fleckpe hides within seemingly innocent apps such as photo editing software and wallpaper packs
A recent scholarly article elucidates vulnerabilities called 'faulTPM' within AMD SoCs that could enable attackers to neutralize any security
CVE-2023-20126 affects Cisco SPA112 2-Port Phone Adapters and allows an attacker to execute arbitrary code on affected devices.
MuddyWater APT group has shifted its focus to MSPs, exploiting legitimate remote access tools and employing various tactics
Researchers from Trend Micro have uncovered a new campaign by Earth Longzhi, a subgroup of APT41, which targets organizations
CVE-2022-46718, a logic issue affecting Apple's iOS, enables unauthorized applications to access users' sensitive location information