Do Son A recently discovered security vulnerability, CVE-2023-28771, has raised major concerns among network experts due to its CVSS score of 9.8
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
ViperSoftX, an information-stealing malware notorious for targeting cryptocurrencies, has recently evolved with new execution techniques
The root of CVE-2023-22651 lies in Rancher's admission Webhook, a component responsible for enforcing validation rules and security checks
Explore the Anti-browser Fingerprint Tracking Technique and learn how to protect your privacy online from tracking methods.
Speculative execution side-channel flaws are security issues present in modern processors; they have been resolved in new Intel processors
Google tracks user browsing behavior on devices by offering specific free fonts for download and installation
Attackers can leverage the CVE-2023-27350 vulnerability to bypass authentication, execute arbitrary code in the context of SYSTEM
How to fix Embedded and IoT development lifecycle issues Developing embedded systems and integrating them into the...
An unauthenticated hacker with network access to VMware Aria Operations for Logs may exploit CVE-2023-20864 to execute arbitrary code as root
Microsoft has announced that it will henceforth employ climate-related nomenclature to designate various types of hacking activities
Researchers from Symantec's Threat Hunter Team have discovered multiple unique plugins associated with the MgBot modular malware framework
CVE-2023-20873 affects multiple versions of Spring Boot, specifically 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions
Parallax RAT operates by creating a file for automatic execution upon device startup and executing a legitimate Windows process.
Online capital convections from card to card are becoming a more and more common practice. Anyone can...
The Play ransomware group has developed two custom tools to infiltrate compromised networks, enumerate users and computers
2023Q1 saw these phishing campaigns primarily target Ukrainian users, accounting for over 60% of the observed Russian cyber activity
NVIDIA has released a security update for its DGX-1 firmware, addressing six vulnerabilities that may lead to issues such as arbitrary code execution
Attackers can exploit the CVE-2023-20046 vulnerability by sending a valid low-privileged SSH key to an affected device from a host configured
CVE-2023-20036 is present in the web UI of Cisco IND and allows an authenticated, remote attacker to execute arbitrary commands
two critical security vulnerabilities have been discovered in PaperCut MF and PaperCut NG, which are currently being exploited in the wild
It's important to note that Google has acknowledged the existence of an exploit for CVE-2023-2136 in the wild.
the Citizen Lab discovered a series of zero-click exploit chains developed by the NSO Group, targeting iOS 15 and iOS 16 devices worldwide