Check Point Research has released a comprehensive report detailing the alarming rise of Rafel RAT, an open-source...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
A critical vulnerability in Icegram Express, a popular email marketing plugin for WordPress with over 90,000 active...
A new ransomware-as-a-service (RaaS) called RansomHub has emerged, targeting Windows, Linux, and ESXi operating systems. This multi-OS...
In a recent report, the eSentire Threat Response Unit (TRU) has uncovered a sophisticated adware strain dubbed...
ESET, a leading cybersecurity provider, has addressed a high-severity vulnerability in its range of Windows security products....
A newly identified espionage group dubbed “SneakyChef” has been targeting government agencies in Europe, the Middle East,...
ANY.RUN, a popular malware analysis service, has reported a recent security incident involving a phishing attack that...
Over 30,000 WooCommerce-powered online stores may be at risk of a serious data breach due to a...
A critical vulnerability in js2py, a widely-used Python library with over 1 million monthly downloads, has left...
A critical vulnerability in a popular PrestaShop module, “Facebook” (pkfacebook) by Promokit.eu, has been discovered and is...
A newly discovered vulnerability dubbed “CosmicSting” (CVE-2024-34102) has sent shockwaves through the e-commerce world, potentially jeopardizing millions...
Ghostscript, a widely-used open-source software for rendering and converting PostScript and PDF files, has released a critical...
Cybersecurity researchers at XLab have uncovered a sophisticated new botnet dubbed “Zergeca.” Discovered in May 2024, this...
Cybersecurity researcher Zhiniang Peng published the technical details and proof-of-concept for two serious vulnerabilities in NVIDIA’s widely...
SocGholish, a sophisticated JavaScript malware framework, has been a persistent threat since its emergence in 2017. Designed...
The French National Cybersecurity Agency (ANSSI) has issued a warning about the continued activity of the Nobelium...
Symantec’s Threat Hunter Team has uncovered a long-running and highly sophisticated cyber espionage campaign targeting numerous telecommunications...
Fortra, the developer of the popular FileCatalyst file transfer solutions, has issued a critical security advisory warning...
On June 5, 2024, SolarWinds issued a critical advisory regarding a newly discovered path-traversal vulnerability in Serv-U,...
Cybersecurity firm Mandiant has unveiled a comprehensive report detailing the extensive cyber espionage campaign of UNC3886, a...
DataDog Security Labs has uncovered a concerning campaign targeting Amazon Web Services (AWS) environments, revealing a new...
FortiGuard Labs’ recent report on Fickle Stealer reveals a sophisticated and adaptable cyber threat that warrants closer...