News

Mon 20 Oct 2025· 52 articles

1. 00:32

   UNC5142 Uses EtherHiding to Deploy Malware via BNB Smart Chain Smart Contracts

   A new joint analysis by Mandiant Threat Defense and Google Threat Intelligence Group (GTIG) has exposed a financially motivated threat cluster, tracked as UNC5142, which uses blockchain technology to conceal and distribute information-stealing malware by…

   SecurityOnline
   
2. 00:26

   131 Chrome Extensions Found Abusing WhatsApp Web for Spam Automation in Massive Reseller Scheme

   A new analysis from Socket has exposed a large-scale spamware operation abusing Google’s Chrome Web Store and WhatsApp Web, identifying 131 Chrome extensions that are rebrands of the same tool designed to automate unsolicited messaging campaigns under the…

   SecurityOnline
   
3. 00:21

   FortiGuard Tracks HoldingHands Malware Shift: Cross-Regional APT Uses Task Scheduler Hijack to Evade Detection

   FortiGuard Labs has uncovered a cross-regional campaign that expanded from China to Taiwan, Japan and most recently Malaysia, with attackers evolving their methods over time. According to FortiGuard Labs, the group began with phishing PDFs posing as Taiwan’s…

   SecurityOnline
   
4. 00:17

   North Korea’s WaterPlum APT Deploys Node.js OtterCandy RAT for Crypto Theft with Anti-Forensic Module

   North Korea’s WaterPlum APT has evolved its OtterCandy malware, built with Node[.]js to function as both a Remote Access Trojan and an Information Stealer across Windows, macOS and Linux. According to NTT Security Japan, OtterCandy can steal browser…

   SecurityOnlineWageMole
   
5. 00:13

   Critical Moxa Flaw (CVE-2025-6950, CVSS 9.9) Allows Unauthenticated Admin Takeover via Hard-Coded JWT Secret

   According to Moxa, the Critical vulnerability CVE-2025-6950 carries a CVSS of 9.9 and stems from a hard-coded secret key used to sign JSON Web Tokens for authentication, enabling an unauthenticated attacker to forge valid tokens, bypass authentication…

   SecurityOnline
   
6. 00:11

   Researcher Details Zero-Click RCE in Dolby Audio Decoder Affecting Android, iOS, and macOS

   SecurityOnline
   
7. 00:10

   North Korea’s UNC5342 APT Uses EtherHiding to Store Malware in Blockchain Smart Contracts for Stealthy C2

   Google Threat Intelligence Group (GTIG) has uncovered a new campaign by the North Korean threat actor UNC5342, marking the first known instance of a nation-state actor using EtherHiding to store malware in blockchain smart contracts for stealthy C2 on BNB…

   SecurityOnlineUNC5342
   
8. 00:08

   Google Abandons Privacy Sandbox Initiative After 6 Years, Citing Low Adoption of New Ad Tech

   Google has formally terminated the Privacy Sandbox initiative, six years after it began in 2019 to replace third-party cookies, citing low adoption of the remaining technologies. According to AdWeek, the move signifies the complete discontinuation of the…

   SecurityOnline
   
9. 00:05

   NVIDIA Unveils First Blackwell Wafer Made in US at TSMC Arizona Fab, Marking Production Milestone

   On 20 October 2025, NVIDIA announced the first Blackwell wafer manufactured on U.S. soil at TSMC’s Arizona fab (Fab 21) in Phoenix, marking a production milestone. The wafer forms the foundation of NVIDIA’s next‑generation AI chip and signals that Blackwell…

   SecurityOnline
   
10. 00:02

    Apple Secures Exclusive F1 Broadcasting Rights in the US Starting 2026; F1 TV Pro Included with Apple TV

    Apple has announced a five-year exclusive broadcasting agreement with Formula 1’s parent company, Liberty Media, granting Apple TV the sole rights to stream all F1 races in the United States from the 2026 season. According to industry sources from July,…

    SecurityOnline
    
11. 00:01

    Critical Keras 3 RCE Flaw (CVE-2025-49655, CVSS 9.8) Allows Code Execution on Model Load

    Researchers at HiddenLayer have disclosed a critical arbitrary code execution vulnerability in the Keras 3 deep learning framework, affecting the Torch backend of versions 3.11.0 through 3.11.2 (CVE-2025-49655, CVSS 9.8). According to the HiddenLayer report,…

    SecurityOnline
    
12. 00:00

    Wikipedia Warns of Existential AI Threat as Page Views Fall 8% Due to Chatbot Summaries

    According to the Wikimedia Foundation, the rapid rise of artificial intelligence poses a profound threat to the integrity of online knowledge and the broader information ecosystem. Wikipedia’s page views have fallen by 8% year over year, a decline attributed…

    SecurityOnline