UltraVNC Archives • Daily CyberSecurity

UltraVNC Repeater Vulnerabilities Allow Remote Code Execution

UltraVNC repeater vulnerabilities enabling arbitrary code execution and hardcoded-password admin access (CVE-2026-7839, CVE-2026-7840)

UltraVNC Repeater Vulnerabilities Allow Remote Code Execution

Do Son July 3, 2026

TL;DR Researchers disclosed two UltraVNC repeater vulnerabilities in the tool’s HTTP admin server. One allows arbitrary code...

Attackers Are Weaponizing Foxit PDF Reader’s Reputation Foxit PDF Malware UltraVNC Hijack

Attackers Are Weaponizing Foxit PDF Reader’s Reputation

Do Son April 28, 2026

A recent report from G DATA highlights a sophisticated campaign targeting users of Foxit Software, a popular...

GamaCopy: A New Cyber Espionage Group Imitating Gamaredon to Target Russia Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

GamaCopy: A New Cyber Espionage Group Imitating Gamaredon to Target Russia

Do Son January 22, 2025

A recent report from the Knownsec 404 Advanced Threat Intelligence team reveals the emergence of GamaCopy, a...

UAC-0185 APT Leverages Social Engineering to Target Ukrainian Defense Industrial Base UAC-0185 - MESHAGENT RAT

UAC-0185 APT Leverages Social Engineering to Target Ukrainian Defense Industrial Base

Do Son December 10, 2024

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a security advisory (CERT-UA#12414) detailing a sophisticated...

New Campaign by Awaken Likho APT Group: Changes in Software and Techniques Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer

Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer

New Campaign by Awaken Likho APT Group: Changes in Software and Techniques

Do Son October 8, 2024

Kaspersky researchers have discovered a new campaign by the Awaken Likho APT group, also known as Core...