Do Son
TL;DR A critical Gitea RCE flaw now has public details and a proof-of-concept exploit. Tracked as CVE-2026-60004,...
Do Son
Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
At a Glance Malware family Lampion, a Brazilian banking trojan from the ChePro lineage Threat actor No...
At a glance Malware family msaRAT, a Rust remote access trojan Threat actor Chaos ransomware group (confirmed...
The Model Context Protocol (MCP), spearheaded by Anthropic, recently launched its highly anticipated 2026-07-28 specification. The defining...
TL;DR Threat actors injected a critical backdoor into the Advanced Responsive Video Embedder plugin. This flaw tracks...
TL;DR Attackers are exploiting a SmartConsole authentication bypass in Check Point management servers. The flaw, CVE-2026-16232, lets...
TL;DR NVIDIA patched a critical NVIDIA BlueField vulnerability tracked as CVE-2026-65094. The VIRTIO-Net flaw scores a CVSS...
TL;DR IBM patched five IBM Aspera vulnerabilities across two products on July 20, 2026. They affect Aspera...
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints...
TL;DR Mitel published two advisories. The first covers a MiCollab command injection bug rated critical at CVSS...
TL;DR CISA published ICS advisory ICSA-26-204-04 on July 23, 2026. It details five security bugs in Panduit...
TL;DR JetBrains patched a critical TeamCity RCE tracked as CVE-2026-63077. The flaw scores a CVSS of 9.8...
TL;DR: A public proof-of-concept now targets CVE-2026-42533, an NGINX heap overflow rated CVSS 9.2. The bug lets...
A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named...
TL;DR The OVSwrap local root flaw lets an unprivileged user gain root on many Linux systems. It...
Attackers already strike at machine speed with AI. Defenders, meanwhile, still drown in thousands of indigestible security...
At a glance Actor or group TAG-195, also tracked as Golden Chickens and Venom Spider; deployment observed...
At a Glance Actor or group JadeProx, a China-nexus cluster named by Group-IB; no known group named...
At a glance Threat actor Famous Chollima, also called Wagemole; North Korea-aligned Activity type Social engineering via...
Moonshot AI’s much-watched Kimi K3 model has opened its weights. K3 is the world’s first 3T-class open-weight...
Windows 10 and 11 preview builds carry a built-in dedicated digital certificate that controls their expiry date....
Do you run the desktop edition of Raspberry Pi OS? If so, Google Chrome’s native Chrome for...