Organizations using Cleo file transfer software are urged to take immediate action as a critical vulnerability, CVE-2024-50623,...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Silent Push Threat Analysts have shed light on a large-scale phishing and pig-butchering network targeting retail brands...
A collaborative research effort has exposed a significant vulnerability, designated CVE-2024-21944 and named “BadRAM,” that undermines the...
Zloader, the modular Trojan with roots in the infamous Zeus malware, has once again evolved, presenting a...
A recent report by the Socket Research Team uncovers a sophisticated typosquatting attack targeting developers using the...
GitLab has issued an important security update addressing a range of vulnerabilities affecting multiple versions of its...
In a sudden and unexpected turn of events, OpenAI’s ChatGPT, the AI chatbot that has taken the...
A critical vulnerability has been discovered in the Splunk Secure Gateway app that could allow a low-privileged...
zLabs has uncovered AppLite, a sophisticated new variant of the AntiDot banking trojan, targeting Android devices through...
The US Department of Justice announced the unsealing of an indictment against Guan Tianfeng, a Chinese national...
In a sophisticated cyberespionage campaign dubbed Operation Digital Eye, SentinelOne and Tinexta Cyber uncovered activities linked to...
Ivanti, a leading provider of IT management and security solutions, has released critical security updates for the...
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a security advisory (CERT-UA#12414) detailing a sophisticated...
Ivanti, a leader in unified endpoint and enterprise service management, has issued patches for several high and...
Jamf Threat Labs has identified a vulnerability in Apple’s Transparency, Consent, and Control (TCC) security framework. Designated...
Microsoft has announced significant enhancements to its default security configuration, aimed at mitigating the risk of NTLM...
Siemens Healthineers has released a critical security update to address an unauthenticated SQL injection vulnerability in its...
In a recently disclosed analysis, Zafran’s research team has unveiled a pervasive misconfiguration vulnerability affecting some of...
A recent incident involving Hetzner, a well-known European cloud hosting provider, and Kiwix, a non-profit organization dedicated...
The Apache Software Foundation has announced the release of Apache Superset 4.1.0, an important update that addresses...