News

Tue 13 May 202592 articles

1. 02:37

   PoC Released: CVE-2025-31258 Sandbox Escape in macOS via RemoteViewServices

   Apple has released a patch for a newly disclosed vulnerability in macOS, tracked as CVE-2025-31258, that could allow

   SecurityOnline
2. 00:45

   Multiple CVEs in GNU Screen: Local Root Exploit and TTY Hijacking Discovered

   A comprehensive security audit by the SUSE Security Team has uncovered a collection of serious flaws in the

   SecurityOnline
3. 00:42

   CVE-2025-1087: Critical Template Injection in Insomnia API Client Enables Remote Code Execution

   A critical vulnerability in Kong’s popular open-source API client, Insomnia, could allow attackers to execute arbitrary code on

   SecurityOnline
4. 00:40

   North Korean APT37’s “ToyBox Story”: Stealthy Attacks Unveiled

   In a recent expose by Genians Security Center (GSC), North Korean-linked APT group APT37 has once again demonstrated

   SecurityOnline
5. 00:33

   AI Tools Turn Trojan: Fake Video Platforms Drop Noodlophile Stealer and XWorm Payloads

   Cybercriminals are now hijacking the hype surrounding AI to deliver sophisticated malware, as revealed in a new threat

   SecurityOnline
6. 00:26

   How to Stop Threats that Bypass Multi-Factor Authentication

   Multi-Factor Authentication (MFA) has long been hailed as one of the most effective ways to secure user accounts.

   SecurityOnline
7. 00:25

   PoC Released: CVE-2025-31644 Exploit Grants Root Access on F5 BIG-IP via Appliance Mode Command Injection

   A high-severity vulnerability identified as CVE-2025-31644 has been discovered in F5’s BIG-IP systems operating in Appliance mode, potentially

   SecurityOnline
8. 00:20

   PupkinStealer: Tiny Malware, Big Theft via Telegram Bot Exposed

   CYFIRMA researchers have revealed a new .NET-based information stealer called PupkinStealer, a lightweight but highly targeted malware that

   SecurityOnline
9. 00:14

   CAPTCHA Trap: Fake Verification Unleashes Lumma Stealer on Unsuspecting Users

   Sophos X-Ops has uncovered a cunning cybercrime campaign using fake CAPTCHA pages to trick users into running PowerShell

   SecurityOnline
10. 00:11

    API Security in 2025: Top Best Practices Every Security Team Must Know

    APIs are the backbone of modern applications and integrations, making API security a top priority for security teams

    SecurityOnline
11. 00:10

    Shadowy IoT Army: Decades-Old Proxy Botnet Exposed and Crippled

    Lumen Technologies’ Black Lotus Labs, in collaboration with the U.S. Department of Justice and the Dutch National Police,

    SecurityOnline
12. 00:05

    Stealth in Pixels: .NET Malware Hides Payloads in Bitmap Resources

    Palo Alto Networks’ Unit 42 has uncovered a sophisticated obfuscation technique leveraging steganography to hide malware within bitmap

    SecurityOnline