In a deep dive into one of the most sophisticated global phishing infrastructures ever uncovered, researchers at...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
A security vulnerability has been identified in Digigram’s PYKO-OUT audio-over-IP (AoIP) product, raising concerns about its use...
The Sansec Forensics Team has uncovered a coordinated supply chain attack that has silently infected ecommerce infrastructure...
A disturbing evolution in the ransomware ecosystem has been exposed by cybersecurity firm SentinelOne, which has published...
IBM has released security updates to address two critical vulnerabilities affecting its flagship business intelligence platform, IBM...
Google has released its Android Security Bulletin for May 2025, highlighting a range of high-severity vulnerabilities affecting...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added CVE-2025-3248 to its Known Exploited Vulnerabilities...
A critical security vulnerability, CVE-2024-7399, is being actively exploited in the wild in Samsung MagicINFO 9 Server,...
A significant security vulnerability has been identified in BeyondTrust’s Privileged Remote Access (PRA) solution, posing a risk...
California Man to Plead Guilty in Hack of Disney Employee, Theft of 1.1TB of Confidential Slack Data
California Man to Plead Guilty in Hack of Disney Employee, Theft of 1.1TB of Confidential Slack Data
In a case that merges social engineering, malware, and corporate espionage, the U.S. Department of Justice (DOJ)...
The MediaTek Product Security Bulletin for May 2025 highlights multiple security vulnerabilities affecting a wide range of...
The U.S. Department of Justice (DOJ) has unsealed a three-count federal grand jury indictment against Rami Khaled...
According to a report by The New York Times, Google is planning to extend access to its...
The UK’s National Cyber Security Centre (NCSC) has issued a warning: ransomware and cyber extortion are no...
A critical security flaw has been identified in Apache Parquet Java, a popular open-source columnar storage format...
In a newly released analysis, Arctic Wolf Labs has documented a sophisticated phishing campaign orchestrated by the...
A critical security flaw has been disclosed in ADOdb, the widely-used PHP database abstraction library with over...
Cyber threat actor RomCom—also tracked as Storm-0978, Tropical Scorpius, UNC2596, Void Rabisu, and UAC-0180—has launched a new...
In a comprehensive technical report, ThreatLabz has dissected the inner workings of StealC V2, a major upgrade...
A newly exploit chain targeting SonicWall’s Secure Mobile Access (SMA) appliances has been released. Published by watchTowr...