Two critical Gitea security flaws currently threaten self-hosted development environments. These severe vulnerabilities allow remote attackers to...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
OpenDJ directory services suffer from a critical security flaw. An OpenDJ unauthenticated RCE vulnerability, tracked as CVE-2026-46495,...
TP-Link recently published a high-severity security advisory regarding CVE-2026-11834. Therefore, multiple TP-Link routers face a severe TP-Link...
AI-generated voiceovers are now common in e-learning modules, product demos, accessibility tools, and multilingual knowledge bases. The...
As AI projects grow, so does the volume of data that needs to be labeled. What starts...
Green light: they ask about constraints before capabilities A strong embedded partner interrogates your constraints before describing...
At a Glance Malware family Rust clipboard hijacker (clipper), Windows and macOS Threat actor Single operator tied...
At a Glance Actors Multiple threat actors (no single named group); strong Chinese-language focus Activity FIFA-themed fraud:...
At a Glance Malware Family: SmartRAT (also tracked as Banana RAT) Threat Actor: Suspected Brazilian cybercriminal groups...
At a Glance Platform abused claude.ai shared chat feature (Anthropic) and GitLab Pages Data exposed Browser credentials,...
TL;DR Security researcher Pavitra Jha published full details regarding a severe Linux kernel vulnerability. Specifically, this MediaTek...
At a Glance Actor or Group: 455 defendants, including 90 medical professionals. Activity Type: Alleged false claims,...
Back in May, Google changed how Search handles your uploads. To train AI models and improve the...
On June 16, Microsoft released an update for Outlook for Mac, with the latest build designated as...
Network infrastructure provider Cloudflare recently announced a collaboration with Google Chrome, Mozilla Firefox, and Microsoft Edge. They...
TL;DR CISA published advisory ICSA-26-169-01 on June 18, 2026. It warns of an AVer PTC camera flaw...
TL;DR Exactly three new containerd critical vulnerabilities threaten cloud infrastructure today. These severe flaws allow attackers to...
TL;DR Webmin released version 2.641 to fix three Webmin vulnerabilities. The most serious one lets an unauthenticated...
When you deposit crypto onto a centralized exchange, you are handing over custody. The exchange’s database ledger...
Outbound calling can create pipeline, but it can also create risk. For US teams, outsourced calling security...
TL;DR Researchers at Calif.io disclosed the Squidbleed vulnerability in the Squid web proxy, tracked as CVE-2026-47729. The...
The United States has one of the most active rail modernisation cycles in decades, but it also...