Do Son
Canonical Opens the Upgrade Path Canonical has begun offering Ubuntu 24.04 LTS users an automatic upgrade to...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
At a Glance Malware family Two backdoors: a Go-based in-memory implant and a persistent TURN/MQTT backdoor Threat...
At a Glance Malware family 2CLoader (Windows loader) Threat actor Unknown; no attribution Targets Windows users; victim...
At a Glance Malware family BPFDoor variants, a BPF-enabled Rekoobe build, a dropper, and six AVERAT builds...
At a Glance Malware family GlassWorm loader; a separate Windows downloader Threat actor GlassWorm operators (high confidence...
Researchers published 2,652 new CVEs between September 28 and October 4, 2026. This weekly CVE report, built...
At a Glance Actor Longlegs (Symantec), also tracked as Storm-2603; described as China-nexus Activity SharePoint exploitation, security...
TL;DR Security researcher Peter Malone has published a full technical analysis and proof-of-concept code for CVE-2026-43682, a...
As highly autonomous AI agents rapidly proliferate across desktop environments, Apple has officially sounded a severe security...
Apple recently confirmed that a small fraction of iPhone 18 Pro Max users in the United States...
TL;DR Citrix has assigned Citrix NetScaler CVE-2026-88779 to the SAML issue behind recent appliance reboots. The company...
Yet another prominent executive tasked with safeguarding model security has departed from OpenAI. David Robinson, the former...
Google Narrows Free Access to Gemini Models Google is changing model access in the Gemini app. According...
Meta Invites Makers to Build Muse Hardware Last week at Connect, Meta unveiled the Muse Charm, a...
TL;DR The Apache Software Foundation disclosed eight CVEs on October 2, 2026, across three projects. The most...
Microsoft has shipped a V2 release of its September 2026 Exchange Server security updates. The only change...
TL;DR AWS published two security bulletins on October 2, 2026, covering four CVEs. Three hit Loom for...
TL;DR Digi International disclosed CVE-2026-75937, a critical Digi DAL OS vulnerability scored 9.4 on CVSS 4.0. One...
TL;DR Google pushed Chrome 154.0.8037.97/.98 to the Stable channel with 11 security fixes. The headline bug, CVE-2026-103628,...
TL;DR GitLab released AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 to fix CVE-2026-90970. The GitLab AI Gateway...
TL;DR Citrix admins report NetScaler appliances rebooting repeatedly even after updating to build 14.1-73.37. Citrix now says...
TL;DR TP-Link published four security advisories on October 1, 2026, covering seven TP-Link vulnerabilities. The worst, CVE-2026-102369,...