Do Son
Cloudflare has officially declared its intention to autonomously issue publicly trusted certificates for websites, establishing the bedrock...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
On August 31, 2026, attackers broke into a school’s print server and ended up owning its entire...
A fake update component for the Poedit translation app gave attackers a quiet foothold on Windows machines....
TL;DR ASUS recently disclosed three high-severity hardware and firmware flaws. These ASUS security vulnerabilities impact multiple router...
TL;DR Attackers are exploiting a MediaWiki RCE flaw tracked as CVE-2026-100382. This CVSS 10 unauthenticated RCE sits...
TL;DR Project maintainers released patches to address four ModSecurity security vulnerabilities. Specifically, these bugs cause uninitialized pointer...
TL;DR Axios released updates to patch ten Axios security vulnerabilities. Specifically, these bugs include prototype pollution and...
TL;DR Dell published an advisory covering four Dell Terraform Provider vulnerabilities. The most critical flaw disables TLS...
TL;DR Kiteworks disclosed 78 security flaws across its Core platform, Email Protection Gateway, and forms products. Nine...
TL;DR The Apache Software Foundation resolved eight Apache MINA SSHD vulnerabilities. These critical security defects include authentication...
TL;DR Developers disclosed six Apache WSS4J vulnerabilities. These critical security defects include authentication bypasses and denial of...
TL;DR On September 30, 2026, the Python Software Foundation disclosed two security flaws in CPython. These critical...
TL;DR CISA published advisory ICSA-26-272-07 on September 29, 2026, covering two flaws in the Viidure dashcam app...
TL;DR CVE-2026-88772 is a pre-authentication memory overflow in Citrix NetScaler ADC and Gateway. Attackers exploited it in...
A single crafted email can give attackers a shell on an unpatched Zimbra mail server. Microsoft Threat...
TL;DR Cisco has patched CVE-2026-76504, a CVSS 9.8 authentication bypass in Cisco SD-WAN Manager. Attackers already exploit...
Since January 2026, a Russian state hacking group has sent at least 13 large phishing waves to...
At the recently concluded DevDay developer conference, OpenAI once again galvanized the AI subscription market. The company...
Mozilla Rolls Out the New Firefox Interface After months of Nightly testing, Mozilla has released a newly...
TL;DR The Apache Software Foundation disclosed CVE-2026-102508, a critical Apache PLC4X vulnerability in its OPC UA driver,...
OpenAI Unveils Dots, the Always-On Assistant OpenAI has formally revealed the persistent AI assistant that was once...
More than 13,000 internal screenshots sat in public GitHub repositories, open to anyone. Glow Labs says AI...