Do Son
TL;DR Gitea has shipped 27 security fixes across versions 28.0.0 and 28.1.0. This Gitea security update closes...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
At a Glance Malware family PHP web shells, a Perl web shell installer, Platypus agents, and a...
TL;DR Attackers have begun CVE-2026-21589 exploitation against self-managed Atlassian servers. Researchers at watchTowr published a full technical...
Anthropic Speeds Toward the Public Markets Anthropic, the closely watched AI startup behind the Claude models, is...
TL;DR Elastic has published 14 security advisories covering Elasticsearch, Kibana and Elastic Defend. Three of these Elastic...
TL;DR ASUS has released router firmware that fixes four security flaws, and two of them rate Critical...
Attackers Seize Three Country-Code Domains Google’s security team has reported a recent wave of registry hijacks. Attackers...
TL;DR ASUSTOR has patched CVE-2026-105324, a critical ASUSTOR ADM vulnerability with a CVSS 4.0 score of 9.2....
TL;DR HPE Networking has patched nine HPE AOS-Switch vulnerabilities, and six of them rate Critical. The worst...
TL;DR Maintainers of Handlebars.js have patched two critical flaws that can lead to remote code execution. Each...
TL;DR Google has promoted Chrome 155 to the Stable channel with 247 security fixes. The Chrome 155...
TL;DR Arista has patched six flaws in the CloudVision CUE (CV-CUE) backend for its WiFi software. The...
TL;DR HPE Networking has fixed 28 ClearPass Policy Manager vulnerabilities in a single advisory, and ten of...
TL;DR Veeam has fixed three flaws in Backup & Replication version 12, led by CVE-2025-64393. This critical...
TL;DR WordPress released version 7.1.3 on October 6, 2026. The WordPress 7.1.3 security update addresses seven reported...
TL;DR SonicWall has fixed four flaws in its SMA1000 remote access appliances, led by CVE-2026-102255, a SonicWall...
TL;DR Progress has fixed CVE-2026-91140, a critical Progress DataDirect vulnerability in its Autonomous REST Connector AI Model...
TL;DR CERT@VDE has disclosed CVE-2026-94293, a critical AAS edge client vulnerability in Murrelektronik’s aas-edge-client. The flaw scores...
The global tech landscape in 2026 is facing a significant challenge. With a severe tech talent shortage...
TL;DR Fortbridge researcher Adrian Tiron has published a working proof-of-concept for a WordPress libheif RCE chain. It...
At a Glance Malware family ClingSTUN, a Linux back-connect proxy backdoor Threat actor Unknown; no attribution Targets...
The delicate interplay of competition and cooperation between Apple and Google within the search engine and browser...