A newly discovered vulnerability in MITRE Caldera, tracked as CVE-2025-27364, has been assigned a critical CVSS score...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Security researcher Zach Hanley (@hacks_zach) of Horizon3.ai published the technical details and a proof-of-concept (PoC) exploit code...
A severe security vulnerability, tracked as CVE-2025-1128, has been uncovered in the popular WordPress plugin, Everest Forms,...
Threat hunters at Hunt.io have uncovered a widespread malware campaign targeting Chinese-speaking users by distributing backdoored versions...
Mattermost, an open-source platform for team communication and collaboration, has addressed three critical security vulnerabilities affecting its...
First spotted by Beebom, Microsoft is currently testing a free version of Microsoft Office for users in...
OpenAI has confirmed that it has begun blocking accounts linked to Chinese and North Korean users who...
Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security vulnerabilities to its Known Exploited Vulnerabilities...
A new report from Unit 42 has linked the Stately Taurus threat actor to Bookworm malware, revealing...
Security researchers at The DFIR Report have uncovered a highly coordinated attack that leveraged a critical remote...
Apple Intelligence is currently powered primarily by OpenAI, but Apple has previously indicated that it plans to...
Reuters, citing sources familiar with the matter, reports that EU competition regulators may file an antitrust lawsuit...
Google has recently launched “Career Dreamer,” an AI-powered job-matching service designed to help users find opportunities that...
The eSentire Threat Response Unit (TRU) has uncovered a new campaign targeting Mac users with the Poseidon...
Security researchers at Kaspersky Labs have uncovered a large-scale cybercrime campaign, dubbed GitVenom, that targets GitHub users...
Microsoft has recently released Windows 11 Insider Preview Build 22635.4950 to users enrolled in the Windows Insider...
The Australian Government has issued a new directive banning the use of Kaspersky Lab products and web...
The US.KG domain, which previously offered free subdomains, has once again been suspended from resolution by the...
A newly disclosed 0-day vulnerability in Parallels Desktop has exposed a root privilege escalation flaw, bypassing the...
A new malware campaign uncovered by Cyble Research and Intelligence Labs (CRIL) is leveraging Null-AMSI to bypass...
Libxml2,a widely used XML parsing library developed for the GNOME project but also utilized across various platforms,...
A new report from Group-IB exposes a growing cybersecurity threat: browser fingerprint theft. Cybercriminals are using sophisticated...