Do Son AppleProcessHub, a new macOS infostealer, uses an Objective-C dropper and AES-decrypted C2 to steal sensitive files like SSH keys and Keychain.
A high-severity Siemens SiPass flaw allows unauthenticated remote attackers to cause a denial-of-service condition. Update to V2.95.3.18.
A fake Google Meet page on compromised WordPress sites tricks users into manually running PowerShell commands, delivering remote access malware.
GhostSpy, a sophisticated Android RAT, uses Accessibility Services for full surveillance, data theft (including 2FA), and device control.
ChatGPT's Deep Research now connects to Box and Dropbox, allowing AI to access your cloud files for more personalized and in-depth reports.
Windows 11's Smart App Control offers proactive malware blocking with performance benefits over traditional antivirus. Learn how it works.
A critical flaw (CVE-2025-35003) in Apache NuttX RTOS allows RCE or DoS via crafted Bluetooth packets. Update to version 12.9.0 now.
A critical Canon printer vulnerability (CVE-2025-2146, CVSS 9.8) allows network attackers to execute arbitrary code. Update firmware now.
A critical pre-authentication RCE vulnerability in vBulletin 5.x and 6.x allows full server compromise. A PoC exploit is available.
A critical WSO2 vulnerability (CVE-2024-6914, CVSS 9.8) allows unauthenticated account takeover via a SOAP service, including admin access.
A high-severity vulnerability (CVSS 9.4) in Sony SNC-series cameras allows remote admin access due to hard-coded default credentials. PoC exists.
TA-ShadowCricket (formerly Shadow Force), a China-linked group, has been active for over a decade, targeting Asia-Pacific government and enterprise networks.
A new malware family, DOUBLELOADER, leverages the ALCATRAZ obfuscator to deploy RHADAMANTHYS infostealer with advanced evasion techniques.
An active npm malware campaign uses over 60 packages to steal internal/external IP addresses, hostnames, and user paths, designed for enterprise network mapping.
Russian-aligned TAG-110 (APT28) is launching a cyber-espionage campaign using macro-enabled Word docs to target Tajikistan's public sector for intelligence.
An unauthenticated flaw in GNOME's remote desktop (CVE-2025-5024) allows attackers to repeatedly crash Linux environments, preventing recovery even after systemd restarts.
The alleged architect of the Qakbot malware empire, Rustam Rafailevich Gallyamov, has been indicted, facing charges and a $24M crypto seizure.
Over 40 malicious Chrome extensions, disguised as legitimate tools, are stealing cookies, logins, and impersonating users, many still live on the Web Store.
The "ClickFix" campaign tricks users with fake CAPTCHAs, leading them to paste malicious commands into the Windows Run dialog, delivering infostealers.
ddos-admin
Access to Vulnerability Reports Now Requires Support At SecurityOnline.info, we are committed to providing high-quality, independent reporting...
A Ghostscript vulnerability (CVE-2025-48708) embeds plaintext passwords in encrypted PDF files, undermining document security. Update now!
Threat actors are installing legitimate DB client tools like DBeaver and Navicat on compromised systems to covertly steal sensitive database information.