News

Wed 29 Oct 2025· 88 articles

1. 00:33

   Docker Compose Path Traversal (CVE-2025-62725) Allows Arbitrary File Overwrite via OCI Artifacts

   Docker Compose has disclosed a high-severity path traversal vulnerability, CVE-2025-62725, which can allow arbitrary file writes across Docker Desktop, standalone Compose binaries, CI/CD pipelines and cloud development environments. According to the…

   SecurityOnline
   
2. 00:30

   BlueNoroff APT Launches AI-Enhanced Espionage on macOS, Using GPT-4o Images in Fake GhostCall Meetings

   BlueNoroff, the North Korean APT group also known by names such as Sapphire Sleet, APT38 and TA444, has launched two intertwined campaigns dubbed GhostCall and GhostHire, expanding its macOS-focused espionage and financial-theft operations. According to…

   SecurityOnlineLazarus Group
   
3. 00:26

   Wear OS Messages Flaw (CVE-2025-12080) Allows Unprivileged Apps to Send SMS/RCS Without Permission, PoC Available

   SecurityOnline[.]info reports that Wear OS Messages Flaw CVE-2025-12080 allows any installed app to send SMS, MMS or RCS messages on a user’s behalf without permissions or user interaction, a finding disclosed by security researcher Gabriele Digregorio.…

   SecurityOnline
   
4. 00:21

   Critical Magento Flaw (CVE-2025-54236) Actively Exploited for Session Hijacking and Unauthenticated RCE

   According to Akamai researchers, a critical Magento vulnerability known as SessionReaper (CVE-2025-54236) is being actively exploited in the wild to hijack user sessions and, in some conditions, achieve unauthenticated remote code execution. Akamai’s warning…

   SecurityOnline
   
5. 00:18

   Beast Ransomware Emerges as New RaaS Threat, Using ChaCha20 and Stealthy VSS Deletion

   Researchers at the AhnLab Security Intelligence Center outline Beast as a rapidly expanding RaaS operation that evolved from the Monster ransomware family, emerging in February 2025 and launching a Tor-based data leak site in July. By August, the Beast group…

   SecurityOnline
   
6. 00:11

   Critical MikroTik Flaw (CVE-2025-61481, CVSS 10.0) Exposes Router Admin Credentials Over Unencrypted HTTP WebFig

   A newly disclosed vulnerability, CVE-2025-61481, rated CVSS 10.0, affects MikroTik RouterOS 7.14.2 and SwOS 2.18 and allows remote attackers to execute arbitrary code or intercept credentials via the WebFig management interface, which runs over HTTP by…

   SecurityOnline
   
7. 00:06

   Water Saci Evolves: Multi-Layered WhatsApp Worm Uses IMAP Email for Covert C2 and Session Hijacking

   Researchers from Trend Research have identified a major evolution in the Water Saci malware campaign, which has progressed from WhatsApp distribution to a multi-layered, script-driven botnet capable of real-time coordination and remote control. The campaign,…

   SecurityOnlineWater Saci
   
8. 00:01

   Rhadamanthys Infostealer Hides in Ren’Py Visual Novel Games, Deploys Malware via Fake 1 Million Second Loading Screen

   Researchers at the AhnLab Security Intelligence Center (ASEC) have uncovered a malware campaign in which the Rhadamanthys Infostealer is distributed under the guise of Ren’Py-based visual novels, a popular engine among indie developers. The infection chain…

   SecurityOnline