Forescout Research – Vedere Labs, in collaboration with PRODAFT, has unveiled a massive ransomware campaign exploiting vulnerabilities...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The AhnLab Security Intelligence Center (ASEC) has uncovered a series of cyberattacks on Korean companies orchestrated by...
A new report by CYFIRMA reveals an alarming escalation in cyber threats targeting the UK, orchestrated by...
Cybersecurity researchers from Netskope have uncovered a new side-loaded backdoor, dubbed Yokai, targeting Thai officials through decoy...
In today’s rapidly evolving financial ecosystem, banks and payment service providers (PSPs) face increasing demands for efficiency,...
Microsoft has disclosed a critical Remote Code Execution (RCE) vulnerability in its Lightweight Directory Access Protocol (LDAP)...
Threat actors have begun exploiting a critical vulnerability in the Apache Struts framework, CVE-2024-53677, just days after...
A serious security flaw has been discovered in Laravel Pulse, a popular real-time application performance monitoring and...
A recent report from CloudSek’s Threat Researcher Team exposes a highly sophisticated phishing campaign that targets popular...
A new Federal Trade Commission (FTC) report reveals a dramatic rise in online job scams targeting consumers...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about two critical vulnerabilities...
Unit 42 has uncovered HeartCrypt, a Packer-as-a-Service (PaaS) designed to protect malware from detection. Since its launch...
A critical XML External Entity (XXE) Injection vulnerability, identified as CVE-2024-55875, has been discovered in the http4k...
Elastic Security Labs has revealed a significant evolution in malware development with the discovery of GOSAR, a...
Zscaler ThreatLabz has uncovered a novel malware campaign leveraging Node.js applications for Windows to deliver cryptocurrency miners...
Trend Micro has revealed a new vector for cyberattacks: voice phishing (vishing) conducted via Microsoft Teams. This...
According to Datadog Security Labs, a cybercriminal group known as MUT-1244 has launched a sophisticated attack campaign...
OpenAI experienced a significant service disruption on December 11, 2024, impacting all its services, including ChatGPT, the...
A critical vulnerability in the Spring Framework, tracked as CVE-2024-38819 (CVSS score 7.5), has been publicly disclosed,...
In a critical revelation highlighting the vulnerabilities of IoT ecosystems, Team82 has published a report detailing 10...
A critical security vulnerability, tracked as CVE-2024-45337 (CVSS 9.1), has been discovered in the Golang cryptography library....