Do Son
Security researchers at QiAnXin XLab discovered over 4,300 legacy routers infected globally. They named this new threat...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
At a Glance Actor: Suspected single Chinese operator Activity Type: Cloud DNS takeover, SEO poisoning Targets: 163...
Google announced its Android developer verification program in 2025. The plan requires a valid developer signature, even...
India’s Tata Group has confirmed to Reuters that it recently suffered a cyberattack. Hackers claim they stole...
Apple appears to be systematically dismantling its legacy ecosystem. Following the termination of Time Capsule backup protocol...
Apple has released iOS 27 Developer Beta 2 to developers. Users eager to try new features can...
The Codex desktop and CLI versions continuously wrote low-level logs to the local database. Consequently, this high-frequency...
TL;DR Three critical Tinyproxy request smuggling vulnerabilities threaten network security. These flaws allow attackers to inject arbitrary...
TL;DR A serious libssh2 vulnerability now puts SSH clients at risk. Researchers track it as CVE-2026-55200,...
TL;DR Three serious MariaDB server vulnerabilities threaten database environments. The most severe flaw carries a maximum CVSS...
TL;DR Mitel disclosed 12 security flaws in MiCollab and the MiVoice Business Solution Virtual Instance (MiVB SVI)....
TL;DR CERT/CC disclosed a Secure Boot bypass that affects many vendor-signed UEFI applications. ESET researcher Martin Smolar...
TL;DR Two critical flaws affect the HAProxy software. First, an integer overflow bug allows response smuggling....
At a Glance Actor or Group: Unidentified cyber criminals Activity Type: Malicious website redirection and malware distribution...
At a Glance Actor: UNC6508 (suspected PRC-nexus threat actor) Activity Type: Cyber espionage, bespoke malware deployment, data...
TL;DR QNAP has patched four QNAP QuMagie vulnerabilities, three of which need no login at all....
At a Glance Malware Family: Various (DarkKomet, infostealers, crypto miners) Threat Actor: Suspected multiple independent hacking groups...
TL;DR Apache Doris version 0.6.1 patches a severe security flaw in its MCP Server. Specifically, an Apache...
Currently, the Microsoft Edge browser exclusively supports Microsoft accounts for authentication. Following a successful sign-in, the browser...
At a glance Malware family SHEETCREEP (SHEET#CREEP), C# .NET RAT Threat actor APT36 / Transparent Tribe (suspected,...
Combatting Advanced Bots with Hand Gestures Google initiated a limited beta test for its reCAPTCHA hand gesture...
Microsoft recently unveiled the early preview of Windows 11 version 26H2. The official release will likely debut...