Do Son
TL;DR Pega disclosed a Pega Platform SAML authentication bypass on September 18, 2026. It covers two flaws,...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
TL;DR On September 21, 2026, federal authorities confirmed active attacks against a critical Zyxel switch vulnerability. The...
TL;DR A researcher published cups2root, a working proof-of-concept that escalates a local lpadmin user to root on...
TL;DR A critical logic flaw exists in the Android 17 Telecom service. The Android Telecom vulnerability allows...
If you are operating a business in the US, you will likely face several networking challenges. Some...
Qualcomm announced a profound renewed collaboration with Google today. Together, they jointly unveiled an entirely new laptop...
Recently, security researchers disclosed sandbox escape vulnerabilities discovered within Codex. Attackers do not need to directly breach...
The well-known cloud-storage service Dropbox has recently released a new version of its terms of service. The...
The Intellectual Property Commission operates under the Spanish Ministry of Culture. Recently, it issued a directive mandating...
At a Glance Attribute Details Malware Family PhantomRaven Threat Actor Suspected bug bounty hunter (Aliases: JPD, jpdhellonpm1)...
At a Glance Actor or group: NightEagle (also tracked as APT-Q-95). Activity type: Cyberespionage, tunneling, and Active...
At a Glance Attribute Details Malware Family KREMLIN (also tracked as CHROMEBALLRAT) Threat Actor REF9334 (alias Kr3mlin4rt1st;...
The Google Threat Intelligence team recently disclosed at a security conference that a security researcher from its...
A recent New York Times report reveals Microsoft’s deep concerns regarding OpenAI harvesting content for AI training....
According to a disclosure from the security firm SlowMist, the company recently received multiple reports of users’...
Cloud recovery represents a powerful new feature that Microsoft recently integrated into Windows 11. This tool utilizes...
According to a report from Thomson Reuters, the European Commission has recently proposed prohibiting any child under...
TL;DR Security researchers recently uncovered over 20 critical IBM Guardium vulnerabilities impacting data protection systems. These flaws...
The week in numbers CVE WATCHTOWER logged 4,378 new vulnerabilities between September 14 and September 20, 2026....
TL;DR Security researchers disclosed 14 vulnerabilities across three major MongoDB integration libraries. These MongoDB driver vulnerabilities threaten...
TL;DR AIR Security disclosed Plugin4Shell, a zero-click remote code execution flaw in four AI coding agents. The...
TL;DR Security researchers uncovered a critical remote code execution chain in WordPress Core dubbed Click2Shell. The WordPress...