News

Thu 25 Sep 2025· 90 articles

1. 02:09

   Cisco SNMP Flaw (CVE-2025-20352) Actively Exploited: Patch Now to Stop Root Access!

   Cisco has issued a security advisory warning of a critical flaw in its IOS and IOS XE Software, tracked as CVE-2025-20352, which has already been exploited in the wild and carries a CVSS score of 7.7. The vulnerability stems from a stack overflow in the SNMP…

   SecurityOnline
   
2. 00:30

   New LNK Malware Uses Windows LOLBins to Evade Detection

   Researchers at K7 Security Labs have uncovered a new wave of Windows shortcut (.LNK) malware that uses Living-off-the-Land Binaries (LOLBins) to evade detection, with the campaign first observed in Israel and distributed via Discord. According to K7 Security…

   SecurityOnline
   
3. 00:26

   Hidden Backdoors in WordPress: How Attackers Use Fake Plugins and Core Files for Persistent Access

   SecurityOnline[.]info reports that on 25 September 2025, a Security researcher from Sucuri uncovered two malicious WordPress components designed to guarantee persistent attacker access by manipulating administrator accounts. The first backdoor, hidden as a…

   SecurityOnline
   
4. 00:20

   Russian Disinformation Campaign Targets Moldova’s Pro-EU Elections

   Researchers at Silent Push have uncovered a Russian-linked disinformation campaign aimed at Moldova’s pro-European elections, with the vote due on 28 September 2025. The campaign has been attributed to the influence group Storm-1679 (a.k.a. Matryoshka),…

   SecurityOnline
   
5. 00:14

   New Phishing Campaign Targets PyPI Maintainers with Fake Domain

   The Daily CyberSecurity reports a new phishing campaign aimed at PyPI maintainers, this time employing domain confusion and convincing emails to steal credentials. According to Seth Larson, Security Developer-in-Residence at the PSF, the string of phishing…

   SecurityOnline
   
6. 00:10

   CVE-2025-41715 (CVSS 9.8): Unauthenticated Flaw Exposes WAGO Industrial Databases

   CVE-2025-41715 (CVSS 9.8) is an unauthenticated flaw in WAGO Device Sphere and WAGO Solution Builder that could expose databases and enable targeted attacks if left unpatched, according to VDE CERT advisory. The vulnerability stems from a missing…

   SecurityOnline
   
7. 00:09

   Tap to Pay on iPhone Expands to Five New European Countries

   According to Apple, Tap to Pay on iPhone has been extended to five more European markets, namely Estonia, Latvia, Lithuania, Monaco, and Norway, enabling local merchants to accept payments through iPhone. The UK-based fintech SumUp announced support for…

   SecurityOnline
   
8. 00:05

   ShadowV2: How a New DDoS Botnet Mimics Cloud-Native Apps

   ShadowV2 is a new DDoS botnet campaign described by researchers as merging traditional malware techniques with modern DevOps practices. According to Darktrace, it centres on a Python-based command-and-control framework hosted on GitHub CodeSpaces, with a…

   SecurityOnline
   
9. 00:04

   Microsoft’s Microfluidics Breakthrough: A New Era for AI Cooling

   Microsoft has unveiled a microfluidics-based cooling system that the company says can deliver up to three times the efficiency of conventional methods, enabling denser server rack placement and improved overall data centre performance. According to…

   SecurityOnline
   
10. 00:00

    Secret Service Busts Covert Telecom Network Capable of Crippling NYC

    The U.S. Secret Service said it has dismantled a sprawling telecommunications threat network across the New York tristate area, describing it as an “imminent threat” to senior government officials and the agency’s protective operations. According to the…

    SecurityOnline