Do Son
Not long ago, the AI coding tool Grok Build triggered fierce community backlash for uploading developers’ complete...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
TL;DR Red Hat has flagged a critical flaw in Red Hat OpenShift AI. Tracked as CVE-2026-15378, it...
Every month, Microsoft rolls out various Windows 10/11 updates in batches. These updates patch security vulnerabilities, fix...
TL;DR Metabase has patched three critical flaws in its H2 database handling. Two carry CVE IDs and...
TL;DR Apache has fixed five security flaws in Apache IoTDB, an industrial IoT time-series database. The Apache...
TL;DR SonicWall patched a critical SonicWall SMA1000 vulnerability, CVE-2026-15409, on July 14, 2026. Attackers are exploiting it...
TL;DR Dell has patched a batch of flaws in PowerFlex Manager. The most severe, CVE-2026-56688, enables PowerFlex...
This week, Microsoft began pushing the July 2026 monthly security update to all supported devices. Under normal...
As previously reported, SpaceXAI has already released Grok Build as open source to repair its collapsed community...
Recently, security researcher @RDJGR revealed details of CVE-2026-50663 on social media. This flaw affects the classic strategy...
At a Glance Actors Suspected China-nexus (PlugX, ShadowPad, Cobalt Strike) and India-nexus (Remcos; TAG-179) groups Activity type...
At a Glance Malware family Albiriox (Android banking RAT, sold as Malware-as-a-Service), delivered by a UniCredit-branded dropper...
At a glance Actor / group Helix (suspected ties to BlackFile and ShinyHunters) Activity type Data extortion...
At a glance Malware family GigaWiper (Golang backdoor; code ties to Crucio and FlockWiper) Threat actor Not...
TL;DR The CISA KEV catalog gained two entries on July 15, 2026. The agency confirmed active exploitation...
TL;DR Splunk released patches on July 15, 2026 for three Splunk Enterprise vulnerabilities. The most serious, CVE-2026-20296,...
TL;DR F5 has patched three memory safety flaws in NGINX Plus and NGINX Open Source. The most...
TL;DR RabbitMQ has patched two critical flaws that allow authentication bypass. One breaks TLS client-certificate checks. The...
At a Glance Malware family Braintree.Net typosquat, a multi-stage .NET implant with a companion harvester (DependencyInjector.Core) Threat...
TL;DR Zoom has patched four flaws across its Windows products. The most severe Zoom vulnerability, CVE-2026-53412 (CVSS...
At a glance Actor / group Clubfoot Wolf (cluster tracked by BI.ZONE) Activity type Phishing that deploys...
TL;DR JetBrains has patched six JetBrains vulnerabilities across YouTrack, IntelliJ IDEA, and TeamCity. The most severe, CVE-2026-62422...