News

Mon 26 May 202549 articles

1. 00:40

   Sony Camera Hack (CVSS 9.4): Default Credential Flaw Risks Full Control (PoC)

   A newly disclosed critical vulnerability in Sony’s SNC-series network cameras—tracked as CVE-2025-5124 with a CVSS score of 9.4—has

   SecurityOnline
2. 00:35

   Decade of Stealth: China-Linked TA-ShadowCricket Targets Asia-Pacific

   AhnLab and South Korea’s National Cyber Security Center (NCSC) have released a detailed joint report on a persistent

   SecurityOnline
3. 00:30

   DOUBLELOADER Malware Uses ALCATRAZ Obfuscator to Evade Detection

   Elastic Security Labs has identified a new malware family dubbed “DOUBLELOADER” that leverages ALCATRAZ—a game-hacking inspired obfuscator—to deploy

   SecurityOnline
4. 00:24

   NPM Recon: Malicious Packages Found Stealing Internal Network IPs and Hostnames

   Socket’s Threat Research Team has uncovered an active and expanding malware campaign in the npm ecosystem. More than

   SecurityOnline
5. 00:20

   Russian-Aligned TAG-110 Targets Tajikistan Governments with Stealthy Cyber-Espionage

   Recorded Future’s Insikt Group has uncovered a new cyber-espionage campaign by Russia-aligned threat actor TAG-110 targeting public sector

   SecurityOnline
6. 00:16

   Persistent DoS: Unauthenticated Attacker Crashes GNOME RDP (Even After Systemd)

   A newly disclosed flaw in GNOME’s remote desktop component, tracked as CVE-2025-5024 (CVSS 7.4), could allow unauthenticated attackers

   SecurityOnline
7. 00:12

   Qakbot Mastermind Indicted: Russian Architect of $50M Malware Empire Charged

   The U.S. Department of Justice (DOJ) has unsealed charges against Russian national Rustam Rafailevich Gallyamov, the alleged architect

   SecurityOnline
8. 00:09

   Chrome Web Store Under Siege: 40+ Malicious Extensions Found Stealing Data

   LayerX has uncovered more than 40 malicious browser extensions involved in three coordinated phishing campaigns—many still live on

   SecurityOnline
9. 00:02

   Deceptive CAPTCHA: ClickFix Campaign Uses Clipboard Injection to Deliver Malware

   Threat actors have ramped up a new social engineering campaign, dubbed “ClickFix,” where fake CAPTCHA prompts embedded in

   SecurityOnline