Google gave developers an early warning about the Gemini CLI deprecation. Now the change has arrived. The...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Microsoft released its June 2026 Patch Tuesday updates on June 9. Within days, users began reporting odd...
At a glance Malware family Backdoor.Turn (Go-based RAT) Threat actor DragonForce ransomware, developed by Hackledorb (Symantec attribution)...
TL;DR This weekly CVE report covers 2,060 new vulnerabilities disclosed between June 15 and 21, 2026. Among...
TL;DR Maintainers have disclosed four undici vulnerabilities in the widely used Node.js HTTP client. The package draws...
At a glance Malware family ErrTraffic (ClickFix distribution framework / TDS, sold as MaaS) Threat actor Sold...
At a glance CVE CVE-2026-55518 CVSS 9.6 (Critical) Product / vendor Avo admin panel framework / Avo...
Database administrators have urgent patching to do. The pgAdmin team has fixed three critical pgAdmin 4 vulnerabilities,...
TL;DR FreeBSD has patched a kernel flaw, CVE-2026-45257, that hands local root to any unprivileged user. This...
TL;DR QNAP has patched 14 vulnerabilities affecting its QTS, QuTS hero, QuTS cloud, and QVP systems. The...
At a glance Malware Family: shai_hulululud (Protestware/Testing) Threat Actor: Unknown (Suspected researcher or troll) Targets: AI-based malware...
Cybercriminals are actively exploiting ArcGIS Account Recovery configurations to penetrate customer environments. Esri confirms these targeted attempts...
Laser cleaning is a fast and effective way to remove rust, paint, oxide, grease, and other contamination...
A clever new phishing technique skips the password entirely. ReversingLabs has uncovered an active device code phishing...
Security researchers have uncovered GlassWASM malware, a stealthy threat hiding inside trojanized Visual Studio Code extensions. Socket’s...
A transmitter with the highest advertised depth isn’t automatically the right choice for a difficult bore. Deep...
Poland’s national cyber team has sounded the alarm. A fresh UNC1151 Gmail phishing campaign is hunting credentials...
A two-year look at a shared ransomware ecosystem IBM X-Force has released long-term research into the Interlock...
Around one million WordPress sites just got an urgent reason to patch. A critical Avada Builder...
Genians Security Center recently confirmed the continued distribution of compiled Python-based malware. This threat targets Korean users...
Color-coding enthusiasts have a real reason to celebrate. Google is finally retiring Calendar’s long-standing limit of 11...
On the morning of June 19, a server anomaly within Claude Code erroneously obscured users’ weekly quotas....