News

Wed 14 May 202591 articles

1. 00:50

   Varnish Vulnerability Exposes Cache to HTTP Request Smuggling

   Varnish Software has disclosed a client-side desynchronization vulnerability in both Varnish Cache and Varnish Enterprise, which under certain

   SecurityOnline
2. 00:49

   Zoom Patches High-Severity Flaw (CVE-2025-30663) in Workplace Apps

   Zoom has released a security bulletin addressing multiple vulnerabilities across its Workplace Apps suite. The bulletin details a

   SecurityOnline
3. 00:46

   Critical Misconfiguration in Bitnami Pgpool Enables Unauthenticated PostgreSQL Access (CVE-2025-22248)

   A critical security vulnerability has been identified in the Bitnami Pgpool-II Docker image and the bitnami/postgres-ha Kubernetes Helm

   SecurityOnline
4. 00:42

   TA406 Cyber Campaign: North Korea’s Focus on Ukraine Intelligence

   In a recently disclosed campaign, TA406, a North Korean state-aligned threat actor, has expanded its cyber-espionage efforts by

   SecurityOnline
5. 00:38

   Siemens RUGGEDCOM Flaws Scored CVSS 9.9: Command Injection Bugs Threaten Industrial Networks

   Siemens ProductCERT released an urgent security advisory (SSA-301229) detailing multiple command injection vulnerabilities in its RUGGEDCOM ROX II

   SecurityOnline
6. 00:23

   Chihuahua Stealer Unleashed: Obfuscated PowerShell and AES-GCM Encryption Fuel This Advanced Data Theft Campaign

   In the ever-expanding ecosystem of information stealers, a new and unusually sophisticated malware has entered the scene: Chihuahua

   SecurityOnline
7. 00:20

   Earth Ammit Strikes Drone Supply Chains: VENOM and TIDRONE Campaigns Expose East Asia’s Critical Infrastructure

   rend Micro researchers have uncovered the full extent of an elaborate, multi-phase cyber-espionage operation attributed to Earth Ammit,

   SecurityOnline
8. 00:17

   Critical CVE-2025-4632 Flaw in Samsung MagicINFO Puts Global Signage Networks at Risk

   A newly disclosed vulnerability in Samsung’s MagicINFO Server, tracked as CVE-2025-4632, poses a severe risk to digital signage

   SecurityOnline
9. 00:13

   Swan Vector Espionage Targets Japan & Taiwan with Advanced Malware

   The Seqrite Labs APT-Team has uncovered a complex cyber-espionage operation dubbed Swan Vector, targeting educational institutions and the

   SecurityOnline
10. 00:10

    82,000+ WordPress Sites at Risk: TheGem Theme Vulnerabilities Allow Full Site Takeover

    In a recent disclosure by Wordfence, two serious vulnerabilities have been discovered in TheGem, a popular premium WordPress

    SecurityOnline
11. 00:02

    Horabot Malware Targets Latin America with Sophisticated Phishing

    In a recent investigation, FortiGuard Labs has exposed a sophisticated phishing campaign distributing the Horabot malware family, a

    SecurityOnline