cybersecurity

TP-Link Archer C50 (EOL) Exposed: Hardcoded DES Key Allows Sensitive Config Decryption (CVE-2025-6982)

• Vulnerability Report

TP-Link Archer C50 (EOL) Exposed: Hardcoded DES Key Allows Sensitive Config Decryption (CVE-2025-6982)

Do Son July 30, 2025 0

The CERT Coordination Center (CERT/CC) has issued a vulnerability note concerning a flaw in the TP-Link Archer...

Read More Read more about TP-Link Archer C50 (EOL) Exposed: Hardcoded DES Key Allows Sensitive Config Decryption (CVE-2025-6982)

0bj3ctivityStealer: Stealthy Info-Stealer Uses Steganography & PowerShell to Evade Detection

• Malware

0bj3ctivityStealer: Stealthy Info-Stealer Uses Steganography & PowerShell to Evade Detection

Do Son July 30, 2025 0

A recent analysis from the Trellix Advanced Research Center (ARC) has unveiled a sophisticated and stealthy info-stealer...

Read More Read more about 0bj3ctivityStealer: Stealthy Info-Stealer Uses Steganography & PowerShell to Evade Detection

BeyondTrust Privilege Management for Windows: Two High-Severity Flaws Allow Local Privilege Escalation

• Vulnerability Report

BeyondTrust Privilege Management for Windows: Two High-Severity Flaws Allow Local Privilege Escalation

Do Son July 30, 2025 0

BeyondTrust, a global leader in intelligent identity and access security, has issued two advisories addressing two local...

Read More Read more about BeyondTrust Privilege Management for Windows: Two High-Severity Flaws Allow Local Privilege Escalation

Raven Stealer: New MaaS Infostealer Plunders Data via Reflective Process Hollowing & Telegram Exfil

• Malware

Raven Stealer: New MaaS Infostealer Plunders Data via Reflective Process Hollowing & Telegram Exfil

Do Son July 30, 2025 0

A recent in-depth analysis from Cyfirma has shed light on the alarming capabilities of Raven Stealer, a...

Read More Read more about Raven Stealer: New MaaS Infostealer Plunders Data via Reflective Process Hollowing & Telegram Exfil

ChatGPT Agent Bypasses Cloudflare Turnstile: AI Outsmarts “Human Verification” Systems

• Technology

ChatGPT Agent Bypasses Cloudflare Turnstile: AI Outsmarts “Human Verification” Systems

Do Son July 30, 2025 0

Cloudflare’s Turnstile CAPTCHA feature is designed to automate verification and reduce friction caused by traditional image selection...

Read More Read more about ChatGPT Agent Bypasses Cloudflare Turnstile: AI Outsmarts “Human Verification” Systems

SonicWall Alert: Critical SSL VPN Flaw (CVE-2025-40600) Allows Remote DoS Attack on Firewalls

• Vulnerability Report

SonicWall Alert: Critical SSL VPN Flaw (CVE-2025-40600) Allows Remote DoS Attack on Firewalls

Do Son July 30, 2025 0

SonicWall, a prominent provider of cybersecurity solutions, has disclosed a critical vulnerability—CVE-2025-40600—affecting the SSL VPN interface of...

Read More Read more about SonicWall Alert: Critical SSL VPN Flaw (CVE-2025-40600) Allows Remote DoS Attack on Firewalls

Chrome Update: Google Patches High-Severity Use-After-Free in Media Stream (CVE-2025-8292)

• Vulnerability Report

Chrome Update: Google Patches High-Severity Use-After-Free in Media Stream (CVE-2025-8292)

Do Son July 30, 2025 0

Google has announced a Stable Channel update for Chrome Desktop, pushing version 138.0.7204.183/.184 to users on Windows...

Read More Read more about Chrome Update: Google Patches High-Severity Use-After-Free in Media Stream (CVE-2025-8292)

ByteDance’s Trae IDE Under Fire: AI Coding Tool Caught Telemetry Spying Even After Opt-Out

• Data Leak

ByteDance’s Trae IDE Under Fire: AI Coding Tool Caught Telemetry Spying Even After Opt-Out

Do Son July 29, 2025 0

Trae IDE, an AI-powered programming tool and integrated development environment (IDE) developed by ByteDance, has recently come...

Read More Read more about ByteDance’s Trae IDE Under Fire: AI Coding Tool Caught Telemetry Spying Even After Opt-Out

Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data

• Vulnerability Report

Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data

Do Son July 29, 2025 0

Microsoft Threat Intelligence has unveiled a critical macOS vulnerability that exploits Spotlight plugins to bypass the system’s...

Read More Read more about Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data

Sensitive Key Storage Flaws in ASUS’ MyASUS App Threaten Token Security

• Vulnerability

Sensitive Key Storage Flaws in ASUS’ MyASUS App Threaten Token Security

Do Son July 29, 2025 0

ASUS has issued security updates to patch two vulnerabilities in its MyASUS software, a pre-installed utility application...

Read More Read more about Sensitive Key Storage Flaws in ASUS’ MyASUS App Threaten Token Security

Python Tarfile Vulnerability (CVE-2025-8194) Allows DoS via Malicious Archives

• Vulnerability Report

Python Tarfile Vulnerability (CVE-2025-8194) Allows DoS via Malicious Archives

Do Son July 29, 2025 0

A newly discovered vulnerability in Python’s tarfile module, identified as CVE-2025-8194, threatens to hang applications that process...

Read More Read more about Python Tarfile Vulnerability (CVE-2025-8194) Allows DoS via Malicious Archives

Tea Dating App Suffers Second Breach: 1 Million+ Private Messages, Abortion Talks, and IDs Exposed

• Data Leak

Tea Dating App Suffers Second Breach: 1 Million+ Private Messages, Abortion Talks, and IDs Exposed

Do Son July 29, 2025 0

Earlier, the women-only dating application Tea suffered a data breach, during which a 4Chan user accessed 72,000...

Read More Read more about Tea Dating App Suffers Second Breach: 1 Million+ Private Messages, Abortion Talks, and IDs Exposed

RedHook Android Banking Trojan Targets Vietnamese Users with Advanced Phishing & Full Device Takeover

• Malware

RedHook Android Banking Trojan Targets Vietnamese Users with Advanced Phishing & Full Device Takeover

Do Son July 29, 2025 0

In a revelation by Cyble Research and Intelligence Labs (CRIL), a powerful new Android banking trojan dubbed...

Read More Read more about RedHook Android Banking Trojan Targets Vietnamese Users with Advanced Phishing & Full Device Takeover

Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps

• Vulnerability Report

Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps

Do Son July 29, 2025 0

A newly disclosed critical vulnerability in Node-SAML, a widely used SAML 2.0 authentication provider for Node.js, could...

Read More Read more about Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps

XWorm 6.0: New Variant Uses AMSI Bypass & Critical Process Trick to Evade Detection and Crash Systems

• Malware

XWorm 6.0: New Variant Uses AMSI Bypass & Critical Process Trick to Evade Detection and Crash Systems

Do Son July 29, 2025 0

According to the latest report from Netskope Threat Labs, a new version of the XWorm malware—XWorm 6.0—has...

Read More Read more about XWorm 6.0: New Variant Uses AMSI Bypass & Critical Process Trick to Evade Detection and Crash Systems

Stealthy REMCOS Backdoor Delivered by LNK Files: Bypasses Antivirus with Multi-Stage PowerShell Attack

• Malware

Stealthy REMCOS Backdoor Delivered by LNK Files: Bypasses Antivirus with Multi-Stage PowerShell Attack

Do Son July 29, 2025 0

Cybercriminals continue to find clever ways to bypass antivirus solutions and endpoint defenses. A recent Point Wild...

Read More Read more about Stealthy REMCOS Backdoor Delivered by LNK Files: Bypasses Antivirus with Multi-Stage PowerShell Attack

PyPI Warns of Sophisticated Phishing Campaign Targeting Python Developers

• Cybercriminals

PyPI Warns of Sophisticated Phishing Campaign Targeting Python Developers

Do Son July 29, 2025 0

The Python Package Index (PyPI), the central repository for Python developers around the world, has issued a...

Read More Read more about PyPI Warns of Sophisticated Phishing Campaign Targeting Python Developers

Critical CodeIgniter Flaw (CVSS 9.8) Allows Remote Code Execution, Over 2.9 Million Downloads at Risk

• Vulnerability

Critical CodeIgniter Flaw (CVSS 9.8) Allows Remote Code Execution, Over 2.9 Million Downloads at Risk

Do Son July 29, 2025 0

Developers relying on CodeIgniter, one of the most widely adopted PHP full-stack web frameworks with over 2.9...

Read More Read more about Critical CodeIgniter Flaw (CVSS 9.8) Allows Remote Code Execution, Over 2.9 Million Downloads at Risk

Allianz Life Suffers Data Breach: 1.4 Million Customers’ PII Compromised via Cloud CRM Social Engineering Attack

• Data Leak

Allianz Life Suffers Data Breach: 1.4 Million Customers’ PII Compromised via Cloud CRM Social Engineering Attack

Do Son July 29, 2025 0

Global insurance giant Allianz Life has issued a public notice disclosing a security incident that occurred on...

Read More Read more about Allianz Life Suffers Data Breach: 1.4 Million Customers’ PII Compromised via Cloud CRM Social Engineering Attack

Tea Dating App Hacked: 72,000 Images, Including Selfies & IDs, Leaked on 4Chan

• Data Leak

Tea Dating App Hacked: 72,000 Images, Including Selfies & IDs, Leaked on 4Chan

Do Son July 29, 2025 0

Tea is an anonymous dating application exclusively open to women for registration and posting. Its primary function...

Read More Read more about Tea Dating App Hacked: 72,000 Images, Including Selfies & IDs, Leaked on 4Chan

Critical Command Injection (CVE-2025-54416) in tj-actions/branch-names GitHub Action Exposes 5,000+ Repos

• Vulnerability Report

Critical Command Injection (CVE-2025-54416) in tj-actions/branch-names GitHub Action Exposes 5,000+ Repos

Do Son July 28, 2025 0

A critical command injection vulnerability has been disclosed in the widely used GitHub Action tj-actions/branch-names, affecting over...

Read More Read more about Critical Command Injection (CVE-2025-54416) in tj-actions/branch-names GitHub Action Exposes 5,000+ Repos

The Homograph Illusion: Phishing Attacks Exploit Lookalike Characters to Bypass Defenses – AI Amplifies the Threat

• Cybercriminals

The Homograph Illusion: Phishing Attacks Exploit Lookalike Characters to Bypass Defenses – AI Amplifies the Threat

Do Son July 28, 2025 0

In a new report, Palo Alto Networks’ Unit 42 has unveiled an insidious phishing technique that continues...

Read More Read more about The Homograph Illusion: Phishing Attacks Exploit Lookalike Characters to Bypass Defenses – AI Amplifies the Threat