News

Thu 4 Sep 2025· 89 articles

1. 01:41

   CVE-2025-57833: A New SQL Injection Flaw Puts Django Web Applications at Risk

   CVE-2025-57833 is a high-severity SQL injection flaw in Django that could allow malicious input to manipulate SQL statements through FilteredRelation column aliases, potentially leading to unauthorized data access or full compromise of application databases.…

   SecurityOnline
   
2. 01:32

   A $15/Month Piracy Empire: New Report Exposes a Global IPTV Network

   Silent Push Threat Analysts have uncovered a sprawling IPTV-based piracy network that has quietly operated for years, affecting over 20 major media brands worldwide and involving more than 10,000 IP addresses and 1,100 domains. The investigation ties the…

   SecurityOnline
   
3. 00:49

   Crypto as a Weapon: Malicious npm Packages Use Ethereum Smart Contracts for C2

   Researchers from ReversingLabs have discovered two malicious npm packages that use Ethereum smart contracts to conceal and deliver malware, identified as colortoolsv2 and mimelib2 in July 2025. The campaign began with the publication of colortoolsv2 on July…

   SecurityOnline
   
4. 00:39

   CVE-2025-53690: Mandiant and Sitecore Warn of Active Exploitation in ASP.NET Machine Key Configurations

   CVE-2025-53690 has been disclosed as being actively exploited, with Mandiant and Sitecore warning that a critical misconfiguration in ASP[.]NET machine keys can enable remote code execution. The flaw arises from publicly exposed ASP[.]NET machine keys in…

   SecurityOnline
   
5. 00:30

   Obscura: A Stealthy New Go-Based Ransomware Is Abusing Domain Controllers

   Obscura is a stealthy new Go-based ransomware discovered by security analysts at Huntress, named for its README_Obscura.txt ransom note. The malware targets corporate networks by placing itself in the NETLOGON folder of the domain controller, enabling…

   SecurityOnline
   
6. 00:21

   CISA Warns: Actively Exploited TP-Link Router Flaws Added to KEV Catalog

   According to CISA, two TP-Link router vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) Catalog, emphasising the urgency for organisations and home users to act now. The first flaw, CVE-2023-50224 (CVSS 6.5), affects the TL-WR841N…

   SecurityOnline
   
7. 00:05

   Japan, South Korea Take Aim at North Korean IT Worker Scam

   Japan, South Korea and the United States have stepped up cooperation to counter North Korean operatives posing as IT workers, who—according to Google’s Threat Intelligence Group (GTIG)—have expanded their reach across Asia and into Europe. A joint forum held…

   Dark Reading
8. 00:05

   Frostbyte10: The Critical Flaws Threatening Global Supply Chains

   Researchers at Armis Labs have uncovered ten severe vulnerabilities in Copeland E2 and E3 controllers, devices used to manage HVAC, refrigeration, lighting and other building systems, collectively named Frostbyte10. According to Armis Labs, the flaws range…

   SecurityOnline
   
9. 00:01

   DireWolf: The New Ransomware Group Targeting Global Businesses

   DireWolf, a ransomware group that emerged in May 2025, has rapidly developed into a global threat, with victims reported across manufacturing, IT, construction and finance sectors in Asia, Australia, Italy, the United States, Thailand and Taiwan. According…

   SecurityOnline