Do Son
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The logistics industry has undergone an incredible change over the last decade. Increasing customer demand, global supply...
At a glance Actor / group Piracy site operators. Four alleged members of “Los Ciberinfiltrados” arrested in...
TL;DR A critical Gitea vulnerability, CVE-2026-58443 (CVSS 9.6), lets a public-only token push commits into a private...
At a Glance Field Detail Actors UNK_pyreq2323 and UNK_OutFlareAZ (two independent, unattributed clusters) Activity Account enumeration and...
TL;DR The Apache Doris project has patched a critical Apache Doris vulnerability, tracked as CVE-2026-58319. Some Frontend...
TL;DR Siemens has patched a maximum-severity Opcenter X authentication bypass, tracked as CVE-2026-56451. The flaw scores 10.0...
At a glance Malware family HOLLOWGRAPH, linked with high confidence to the Cavern backdoor framework Threat actor...
At a Glance Field Detail Malware family CrashStealer (native C++ macOS infostealer) Threat actor Unattributed; part of...
Operation ShadowRecruit targets Indian job seekers with SheetAgent RAT, abusing ControlR and Google Sheets for C2. Seqrite...
At a Glance Malware family LabubaRAT (previously undocumented) Threat actor Unattributed; no group named Targets Windows hosts;...
Because Codex is open source, we can watch the development team’s daily commits and spot notable changes...
Last week, Microsoft released its routine July 2026 security update. However, the update was found to clash...
In March of this year, Apple formally announced the discontinuation of the Mac Pro. The company removed...
Welcome to the CVE WATCHTOWER briefing. Our latest weekly threat intelligence report reveals an alarming surge in...
TL;DR A critical Kimai vulnerability, CVE-2026-52824 (CVSS 9.1), affects the open-source time-tracking app’s official Docker image. The...
Most routing investigations still depend on someone else’s servers. When an engineer needs to know who originates...
TL;DR The Okta Red Team recently found a severe crash flaw in a core secure library. A...
At a glance Actor / group UTA0533 (Volexity tracking cluster); no nation or identity confirmed Activity type...
The United States Department of Justice recently announced a major policy shift. Federal workers can now legally...
At a glance Organization Hugging Face Data exposed A limited set of internal datasets and several service...
As the artificial intelligence arms race intensifies, computing power has emerged as the most coveted strategic resource....