Daily CyberSecurity

CVE-2024-37404: Critical RCE Flaw Discovered in Ivanti Connect Secure & Policy Secure, PoC Published

• Vulnerability

CVE-2024-37404: Critical RCE Flaw Discovered in Ivanti Connect Secure & Policy Secure, PoC Published

Do Son October 8, 2024 0

Ivanti has addressed a critical remote code execution (RCE) vulnerability affecting its Connect Secure and Policy Secure...

Read More Read more about CVE-2024-37404: Critical RCE Flaw Discovered in Ivanti Connect Secure & Policy Secure, PoC Published

Ivanti Patches CSA Appliance Against Vulnerabilities, Including Actively Exploited Flaws

• Vulnerability

Ivanti Patches CSA Appliance Against Vulnerabilities, Including Actively Exploited Flaws

Do Son October 8, 2024 0

Ivanti has recently released urgent security updates for its Cloud Services Appliance (CSA) to address multiple vulnerabilities,...

Read More Read more about Ivanti Patches CSA Appliance Against Vulnerabilities, Including Actively Exploited Flaws

Hidden Cryptocurrency Mining Campaign Hits Over 28,000 Users, Stealing Thousands in Crypto

• Malware

Hidden Cryptocurrency Mining Campaign Hits Over 28,000 Users, Stealing Thousands in Crypto

Do Son October 8, 2024 0

A recent report from Doctor Web reveals a widespread malware campaign that has compromised over 28,000 users,...

Read More Read more about Hidden Cryptocurrency Mining Campaign Hits Over 28,000 Users, Stealing Thousands in Crypto

CVE-2024-41798 (CVSS 9.8): Siemens SENTRON PAC3200 Meters Vulnerable to Easy Attacks, No Patch!

• Vulnerability

CVE-2024-41798 (CVSS 9.8): Siemens SENTRON PAC3200 Meters Vulnerable to Easy Attacks, No Patch!

Do Son October 8, 2024 0

A newly disclosed vulnerability (CVE-2024-41798) in Siemens SENTRON PAC3200 power meters could allow attackers to gain administrative...

Read More Read more about CVE-2024-41798 (CVSS 9.8): Siemens SENTRON PAC3200 Meters Vulnerable to Easy Attacks, No Patch!

SAP Patches Critical BusinessObjects Vulnerability with October Security Updates

• Vulnerability

SAP Patches Critical BusinessObjects Vulnerability with October Security Updates

Do Son October 8, 2024 0

SAP has released its monthly security patch updates, addressing several vulnerabilities across its product portfolio. The October...

Read More Read more about SAP Patches Critical BusinessObjects Vulnerability with October Security Updates

MoneyGram Notifies Consumers of Data Breach Affecting Sensitive Personal Information

• Data Leak

MoneyGram Notifies Consumers of Data Breach Affecting Sensitive Personal Information

Do Son October 8, 2024 0

MoneyGram Payment Systems, Inc. has recently issued a Notice of Data Breach after discovering that an unauthorized...

Read More Read more about MoneyGram Notifies Consumers of Data Breach Affecting Sensitive Personal Information

PoC Exploit Releases for CVE-2023-52447: A Linux Kernel Flaw Enabling Container Escape

• Vulnerability

PoC Exploit Releases for CVE-2023-52447: A Linux Kernel Flaw Enabling Container Escape

Do Son October 7, 2024 0

Recently, researchers have published technical details and a proof-of-concept (PoC) exploit for a vulnerability in the Linux...

Read More Read more about PoC Exploit Releases for CVE-2023-52447: A Linux Kernel Flaw Enabling Container Escape

Critical Zero-Day Automotive Systems Vulnerabilities Exposed

• Vulnerability

Critical Zero-Day Automotive Systems Vulnerabilities Exposed

Do Son October 7, 2024 0

Recent research by Amit Geynis, a leading security researcher, has highlighted the prevalence of critical vulnerabilities in...

Read More Read more about Critical Zero-Day Automotive Systems Vulnerabilities Exposed

Exploit Releases for TeamViewer Flaws (CVE-2024-7479 & CVE-2024-7481) Let Unprivileged Users Load Arbitrary Kernel Drivers

• Vulnerability

Exploit Releases for TeamViewer Flaws (CVE-2024-7479 & CVE-2024-7481) Let Unprivileged Users Load Arbitrary Kernel Drivers

Do Son October 7, 2024 0

Security researcher Peter Gabaldon published the technical details and proof-of-concept exploit code for two high-severity vulnerabilities, CVE-2024-7479...

Read More Read more about Exploit Releases for TeamViewer Flaws (CVE-2024-7479 & CVE-2024-7481) Let Unprivileged Users Load Arbitrary Kernel Drivers

Chinese Threat Groups Leverage Ransomware for Political Gain

• Cyber Security

Chinese Threat Groups Leverage Ransomware for Political Gain

Do Son October 7, 2024 0

A recent report released by the Natto Team, a renowned group specializing in geopolitical analysis and cyber...

Read More Read more about Chinese Threat Groups Leverage Ransomware for Political Gain

New Anti-Theft Arsenal: Android Gets Theft Detection, Offline, and Remote Lock

• Technology

New Anti-Theft Arsenal: Android Gets Theft Detection, Offline, and Remote Lock

Do Son October 7, 2024 0

Android users in the US are starting to receive a powerful new set of anti-theft features, according...

Read More Read more about New Anti-Theft Arsenal: Android Gets Theft Detection, Offline, and Remote Lock

Your Smart TV is Watching You: New Research Reveals the Extent of ACR Tracking

• Data Leak

Your Smart TV is Watching You: New Research Reveals the Extent of ACR Tracking

Do Son October 7, 2024 0

A new study has revealed the extent to which smart TVs use Automatic Content Recognition (ACR) technology...

Read More Read more about Your Smart TV is Watching You: New Research Reveals the Extent of ACR Tracking

Researcher Releases Open-Source Scanner for CVE-2024-47176 CUPS Vulnerability

• Open Source Tool
• Vulnerability

Researcher Releases Open-Source Scanner for CVE-2024-47176 CUPS Vulnerability

Do Son October 7, 2024 0

Renowned security researcher Marcus Hutchins has unveiled a new open-source tool designed to help administrators and security...

Read More Read more about Researcher Releases Open-Source Scanner for CVE-2024-47176 CUPS Vulnerability

North Korean APT Group Kimsuky Exploits DMARC Misconfigurations for Sophisticated Phishing Attacks

• Cyber Security
• Vulnerability

North Korean APT Group Kimsuky Exploits DMARC Misconfigurations for Sophisticated Phishing Attacks

Do Son October 7, 2024 0

Email security has long been a critical pillar in defending organizations against cyberattacks, but recent reports reveal...

Read More Read more about North Korean APT Group Kimsuky Exploits DMARC Misconfigurations for Sophisticated Phishing Attacks

LemonDuck Exploits EternalBlue Vulnerability for Cryptomining Attacks

• Malware

LemonDuck Exploits EternalBlue Vulnerability for Cryptomining Attacks

Do Son October 7, 2024 0

A recent report from security researchers at Aufa and NetbyteSEC Interns sheds light on the resurgence of...

Read More Read more about LemonDuck Exploits EternalBlue Vulnerability for Cryptomining Attacks

DNS Tunneling: The Hidden Threat Exploited by Cyberattackers

• Cyber Security
• Malware

DNS Tunneling: The Hidden Threat Exploited by Cyberattackers

Do Son October 7, 2024 0

Cyber attackers are increasingly exploiting DNS tunneling as a covert means to conduct malicious activities, evade detection,...

Read More Read more about DNS Tunneling: The Hidden Threat Exploited by Cyberattackers

Beware the Bite of Mamba 2FA: This Phishing Kit Bypasses 2FA

• Cyber Security

Beware the Bite of Mamba 2FA: This Phishing Kit Bypasses 2FA

Do Son October 7, 2024 0

In the rapidly evolving world of phishing, a new player has emerged—Mamba 2FA. In late May 2024,...

Read More Read more about Beware the Bite of Mamba 2FA: This Phishing Kit Bypasses 2FA

Qualcomm Patched Multi Flaws, Including 0-day CVE-2024-43047 & RCE (CVE-2024-33066, CVSS 9.8)

• Vulnerability

Qualcomm Patched Multi Flaws, Including 0-day CVE-2024-43047 & RCE (CVE-2024-33066, CVSS 9.8)

Do Son October 7, 2024 0

Qualcomm has released its October 2024 Security Bulletin, highlighting several critical vulnerabilities affecting a range of its...

Read More Read more about Qualcomm Patched Multi Flaws, Including 0-day CVE-2024-43047 & RCE (CVE-2024-33066, CVSS 9.8)

Cacti Network Monitoring Tool Patches Security Flaws, Including RCE Vulnerability

• Vulnerability

Cacti Network Monitoring Tool Patches Security Flaws, Including RCE Vulnerability

Do Son October 7, 2024 0

Popular open-source network monitoring tool, Cacti, has released an urgent security update addressing multiple vulnerabilities, including a...

Read More Read more about Cacti Network Monitoring Tool Patches Security Flaws, Including RCE Vulnerability

CSP Bypass: A New Open-Source Tool for Ethical Hackers to Overcome Content Security Policies

• Open Source Tool

CSP Bypass: A New Open-Source Tool for Ethical Hackers to Overcome Content Security Policies

Do Son October 7, 2024 0

Renowned security researcher Renniepak, the founder of Hacker Hideout, has launched an open-source tool called CSP Bypass....

Read More Read more about CSP Bypass: A New Open-Source Tool for Ethical Hackers to Overcome Content Security Policies