News

Tue 9 Sep 2025· 94 articles

1. 03:24

   SanDisk Hikes Prices as Storage Costs Continue to Climb

   SanDisk has announced a 10% price increase across all consumer products and channel partner orders, effective for new purchases placed after 5 September 2025. The hike covers a range of storage devices, including solid-state drives, USB flash drives, and…

   SecurityOnline
   
2. 03:19

   Qualcomm and Google Partner to Bring AI to the Car

   Qualcomm has announced an expanded collaboration with Google Cloud to bring Google Cloud’s AI Agent for autonomous vehicles into a hybrid AI framework. Seeding on-device systems with cloud-assisted computation aims to boost AI performance while keeping rapid…

   SecurityOnline
   
3. 02:38

   CVE-2025-58450: Critical SQL Injection Flaw in pREST Puts PostgreSQL Databases at Risk

   CVE-2025-58450 is described as a systemic SQL injection flaw in pREST that endangers users of its PostgreSQL REST API framework. The advisory notes the vulnerability affects versions prior to v2.0.0-rc3 and is rated CVSS 9.4 (Critical), with attackers able…

   SecurityOnline
   
4. 02:22

   Massive npm Supply Chain Attack: Qix’s Account Compromised, Billions of Weekly Downloads at Risk

   Socket has detected a large-scale supply chain attack targeting the npm ecosystem, with the account of prolific maintainer Qix compromised and malicious versions of foundational JavaScript packages published, collectively receiving billions of downloads…

   SecurityOnline
   
5. 02:10

   Adobe Issues Emergency Patch for SessionReaper (CVE-2025-54236), One of Magento’s Most Critical Flaws

   Adobe has issued an emergency patch for CVE-2025-54236, known as SessionReaper, describing it as one of Magento’s most severe flaws. The fix was released ahead of Adobe’s regular schedule after Sansec flagged that automated abuse could target thousands of…

   SecurityOnline
   
6. 01:55

   MostereRAT: The New RAT That Is Bypassing Antivirus and EDR Solutions

   MostereRAT: The New RAT That Is Bypassing Antivirus and EDR Solutions, published on 9 September 2025, reports a sophisticated phishing campaign that deploys a new Remote Access Trojan dubbed MostereRAT. According to FortiGuard Labs, the campaign begins with…

   SecurityOnline
   
7. 01:42

   GhostEmperor2 articles this day · The Hacker News first

   Unmasking Salt Typhoon: A Report Exposes 45 New Domains from a Chinese APT Group · 45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage

   Show 2 articles2 outlets
8. 01:30

   CVE-2025-41243 (CVSS 10): Critical Spring Cloud Gateway Server WebFlux Flaw Exposes Property Modification Risk

   CVE-2025-41243 (CVSS 10.0) is described as a critical flaw in Spring Cloud Gateway Server WebFlux that allows attackers to modify Spring Environment properties under certain configurations. The vulnerability arises when actuator endpoints are exposed without…

   SecurityOnline
   
9. 00:37

   Software packages with more than 2 billion weekly downloads hit in supply-chain attack

   Hackers planted malicious code in open source software packages with more than 2 billion weekly downloads, in what is likely the world’s biggest supply-chain attack. The incident compromised nearly two dozen packages hosted on the npm repository, with the…

   Ars Technica
10. 00:12

    CVSS 9.8 Flaw in macOS Allows Apps to Access Protected User Data, PoC Available

    SecurityOnline
    
11. 00:10

    Salat Stealer: A New Go-Based MaaS Is Hijacking Browsers and Crypto Wallets

    Salat Stealer is described by CYFIRMA as a sophisticated Go-based infostealer targeting Windows systems, operated under a Malware-as-a-Service (MaaS) model. According to CYFIRMA, the malware exfiltrates browser credentials, cryptocurrency wallet data, and…

    SecurityOnline
    
12. 00:05

    Malicious npm Packages Impersonate Flashbots SDKs to Steal Ethereum Wallet Credentials

    On 9 September 2025, Socket’s Threat Research Team disclosed a coordinated supply-chain attack targeting the Ethereum ecosystem via four malicious npm packages impersonating Flashbots tooling. According to Socket’s Threat Research Team, the…

    SecurityOnline
    
13. 00:00

    From CastleLoader to CastleRAT: TAG-150’s Multi-Tiered Cyber Arsenal Expands

    Security researchers have documented a major advance in the operations of the newly designated TAG-150 threat actor, expanding its multi-tiered cyber arsenal with CastleRAT alongside CastleLoader and CastleBot. According to Insikt Group, TAG-150 has been…

    SecurityOnlineGrayBravo