Do Son Nozomi details the Tengu botnet, a modernized Mirai variant. This IoT malware adds encrypted C2, proxy, anti-analysis, and self-defense to resist removal.
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
CastleLoader malware now delivers NeedleStealer, a Rust crypto wallet spoofer and Golang browser hijacker. Arctic Wolf tracks three new campaigns.
Debian 13 pushes a kernel update fixing 68 vulnerabilities including four critical use-after-free flaws. Upgrade to kernel 6.12.100-1 and reboot now.
A devastating ColdCard wallet hack has cost investors nearly $100 million. A critical firmware flaw allowed hackers to drain Bitcoin funds effortlessly.
Discover the OpenAI Astra math breakthrough. This next-gen AI model solved ten complex, decades-old mathematical problems, reshaping scientific research.
The COLDCARD seed flaw theft has climbed to 1,367 BTC across three attack waves and 4,585 wallets, with the third wave using harder-to-trace P2WSH addresses.
ICANN has delegated the .web TLD to the DNS root, ending a decade of legal battles. Verisign plans to open registration in the second half of 2026.
Google is building dynamic patching for Chrome, replacing background sub-processes with updated versions so security fixes land without a full restart.
A SonicWall SMA exploit chain (CVE-2026-15409, CVE-2026-15410) grants root access and now feeds INC Ransomware attacks. Patch to 12.5.0-02835+.
Fedora 46 will enable Intel CET shadow stack protection by default on x86-64 systems, blocking ROP attacks with minimal performance cost.
CVE weekly roundup for Jul 27–Aug 2: 2,077 new flaws logged, 273 critical, 14 rated CVSS 10.0, and 3 CISA KEV additions with active exploitation.
A TP-Link TL-WR940N flaw, CVE-2026-12935, allows unauthenticated remote code execution via an RTSP stack buffer overflow. Update the router firmware now.
CVE-2026-16462 is a critical SQL injection in Weidmueller PROCON-WEB SCADA, rated CVSS 9.8. An unauthenticated attacker can run SQL commands. Patch now.
Microsoft explicitly names 8 GB RAM as an optimization target for Windows 11, driven by soaring memory prices that force OEMs back to lower configs.
OpenAI found more AI agent containment escapes while probing the Hugging Face hack, and Anthropic disclosed three live-system breaches of its own.
CVE-2026-66066 (CVSS 9.5) enables Rails Active Storage RCE via libvips. A Metasploit module is now public. Upgrade Rails and rotate secrets.
A 2021 COLDCARD build error shrank seed entropy from 128 bits to 40, letting attackers drain 594 BTC from 500 wallets in just 15 minutes.
Microsoft outlines progress on its Windows 11 quality pledge: movable taskbar, cleaner search, trimmed AI bloat, and better File Explorer stability.
Google fixed 1,442 Chrome vulnerabilities across versions 149-151, surpassing the combined total of 23 prior releases, driven largely by AI-powered discovery.
The growing Reddit Google AI conflict highlights how AI Overviews crush organic traffic. Discover why Steve Huffman is rethinking their content partnership.
Google Earth AI withdrawal reveals the dangers of AI generated deepfake satellite imagery, prompting a swift rollback of the Nano Banana tool.
Mirage Kitten malware, tied to the UNC1549 APT, hit aviation and telecom targets across the Middle East and Africa with new backdoors and tunnelers.