Do Son
At a glance Malware Family: Backdoor.Mistic Threat Actor: Suspected Woodgnat (aka KongTuke) Target or Victims: Insurance, education,...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer...
At a glance Actor: Unknown threat actor Activity Type: Privilege escalation and zero-day exploitation Targets: Service provider...
In a maneuver reminiscent of Mozilla Firefox’s legacy support strategy, Microsoft recently, and somewhat quietly, updated its...
At a glance Actor: Suspected Chinese-speaking threat actor (low confidence) Activity Type: Malware distribution and silent RMM...
At a glance Actor: Suspected cybercriminal networks (e.g., “Supplier Carl” and “Homborg Online Handel”) Activity Type: Fake...
TL;DR A critical FOSSBilling template injection flaw, CVE-2026-28496, carries a CVSS score of 9.4. Attackers can read...
At a Glance Malware family OXLOADER (loader) delivering CASTLESTEALER (.NET infostealer) Threat actor Unnamed; suspected Russian-speaking and...
At a Glance Malware family Remcos RAT (final payload), via a multi-stage .NET loader chain Threat actor...
TL;DR The Python Software Foundation fixed a python.org authentication bypass on February 24, 2026. The flaw sat...
The ubiquitous open-source utility curl, currently installed on over 30 billion devices worldwide, officially launched its v8.21.0...
Since yesterday, numerous netizens have posted on X claiming to spot Fable 5 within the Claude interface;...
Apple briefly took its online store offline last night, then restored access soon after. The main goal...
TL;DR The CISA KEV Catalog gained two new entries on June 25, 2026. Both additions cite evidence...
TL;DR Gogs patched three critical remote code execution flaws in version 0.14.3. Each Gogs RCE vulnerability scores...
TL;DR Google shipped a Chrome security update on June 10, 2026. The release moves the Stable channel...
TL;DR JFrog researchers discovered a critical heap out-of-bounds write in the FFmpeg MagicYUV decoder. The flaw is...
TL;DR Three critical Langflow security vulnerabilities expose artificial intelligence applications to severe risks. Attackers could execute arbitrary...
TL;DR Red Hat disclosed a critical Event-Driven Ansible flaw tracked as CVE-2026-11807. It scores 9.6 on CVSS...
Following the antitrust settlement between Google and EPIC, Google will launch a revamped billing structure. This launch...
The new Siri AI bundled with iOS 27 inherently avoids processing external hyperlinks. If a user provides...
A short while ago, major conglomerates eagerly proclaimed their wholesale adoption of artificial intelligence. Corporations systematically procured...