Do Son
TL;DR Octopus Deploy has fixed a high-severity Octopus Server vulnerability, CVE-2026-101169. An authenticated user who can edit...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Tibo, the Codex engineering manager, has announced on social media a notable change. Starting tomorrow, the ChatGPT...
At a Glance Attribute Details Malware Family MacSync (originally advertised as Mac.c) Threat Actor Unknown cybercriminals (Malware-as-a-Service...
At a Glance Attribute Details Malware Family SectopRAT (also known as ArechClient2) Threat Actor Unknown (Unconfirmed attribution)...
Fake energy bills went out to Brazilian customers more than 2.4 million times this summer. Each one...
At a Glance Attribute Details Malware Family Android Toll Fraud family (including Messenger Pro and AqMu builds)...
TL;DR watchTowr has published a technical analysis and a public proof-of-concept for CVE-2026-88771, a Citrix NetScaler flaw...
TL;DR The Apache Karaf project has fixed four Apache Karaf vulnerabilities in version 4.4.12. Two are rated...
TL;DR wolfSSL shipped version 5.9.4 on September 25, 2026, fixing 10 wolfSSL vulnerabilities. Three are rated High,...
OpenAI initially planned to release the upgraded GPT-6.1 Astra model soon. However, internal security evaluations revealed a...
As the highly anticipated “Googlebooks” laptop product line prepares for its official market debut on October 4th,...
TL;DR Canonical has patched three critical LXD vulnerabilities rated CVSS 9.6 to 9.9. Each one lets a...
TL;DR CERT/CC released an advisory warning of an Authlib signature bypass vulnerability tracked as CVE-2026-96760. This flaw...
TL;DR On September 29, 2026, WatchGuard disclosed three severe WatchGuard AP vulnerabilities. These flaws allow attackers to...
TL;DR On September 24, 2026, Esri released Security Update 4 to patch three Portal for ArcGIS vulnerabilities....
TL;DR On September 29, 2026, Apple issued emergency updates to remediate an actively exploited Apple zero-day vulnerability....
TL;DR PostgreSQL developers patched a critical integer wraparound flaw in the fuzzystrmatch module. This PostgreSQL RCE vulnerability...
TL;DR Security researchers disclosed a critical Linux container escape flaw affecting the core operating system kernel. The...
As the generative artificial intelligence landscape pivots decisively from reactive conversational chatbots toward proactive, autonomous “Agentic AI,”...
At a Glance Attribute Details Malware Family PamStealer (internal project name: MacClient) Threat Actor Unknown cybercriminals (unconfirmed...
At a Glance Attribute Details Actor or Group Operator tracked as UNKK Activity Type Android banking malware,...
At a Glance Attribute Details Actor or Group Konni (also tracked as TA406 and Opal Sleet; suspected...