News

Tue 25 Nov 2025· 49 articles

1. 01:59

   Critical WordPress Flaw (CVE-2025-6389, CVSS 9.8) Under Active Exploitation Allows Unauthenticated RCE

   A critical vulnerability (CVE-2025-6389) has been discovered in the Sneeit Framework, a WordPress plugin used in themes like FlatNews, allowing unauthenticated Remote Code Execution (RCE) with a CVSS score of 9.8. This flaw affects versions 8.3 and earlier,…

   SecurityOnline
   
2. 00:36

   High-Severity Vault Flaw (CVE-2025-13357) Allows Unauthenticated Access via LDAP Null Bind Insecure Default

   HashiCorp has issued a security advisory regarding a vulnerability (CVE-2025-13357) in the Vault Terraform Provider, which allows unauthenticated access due to a misconfiguration in the LDAP authentication method. The flaw, rated CVSS 7.4, arises from the…

   SecurityOnline
   
3. 00:31

   Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection

   Akamai's Security Intelligence and Response Team (SIRT) has identified a critical unauthenticated command-injection vulnerability in legacy Vivotek IP cameras, originally noted in 2019 under CVE-2019-19936. This flaw allows attackers to execute arbitrary…

   SecurityOnline
   
4. 00:25

   CVE-2025-63207 (CVSS 9.8): Critical Broken Access Control Flaw Exposes R.V.R Elettronica TEX Devices to Full System Takeover

   A critical vulnerability (CVE-2025-63207) has been discovered in R.V.R Elettronica's TEX broadcast hardware, scoring 9.8 on the CVSS scale. The flaw allows attackers to reset user passwords, including the administrator's, via an unauthenticated HTTP request…

   SecurityOnline
   
5. 00:21

   ToddyCat APT Steals Microsoft 365 Cloud Email by Dumping OAuth Tokens from Memory and Copying Locked OST Files

   Kaspersky Lab has reported that the ToddyCat APT group has enhanced its cyber-espionage techniques to infiltrate corporate email systems, including Microsoft 365, by stealing browser data, Outlook mail archives, and OAuth 2.0 access tokens. The report…

   SecurityOnlineToddyCat
   
6. 00:16

   Kimsuky APT Deploys Dual KimJongRAT Payloads, Switching Between PE/PowerShell Based on Windows Defender Status

   The ENKI WhiteHat Threat Research Team has published an investigation detailing a sophisticated cyber-espionage campaign by the North Korean threat actor Kimsuky, utilizing upgraded variants of KimJongRAT in South Korea. The attack employs phishing emails…

   SecurityOnlineKimsuky
   
7. 00:11

   Brazilian Banking Trojan Uses Python WhatsApp Worm and IMAP C2 for In-Memory Credential Theft

   A new phishing and malware operation in Brazil is exploiting WhatsApp Web session hijacking and an advanced in-memory banking trojan, as reported by K7 Labs. The campaign, linked to Water-Saci operations, starts with a phishing email containing a malicious…

   SecurityOnline
   
8. 00:05

   North Korea’s Operation DreamJob Hits Europe: WhatsApp Job Lure Delivers Evolved MISTPEN/BURNBOOK Backdoors

   Orange Cyberdefense has reported a new wave of Operation DreamJob attacks linked to North Korean threat actor UNC2970, targeting a European manufacturing subsidiary via fraudulent job offers on WhatsApp. The campaign utilizes advanced malware variants,…

   SecurityOnline
   
9. 00:00

   China-Nexus Autumn Dragon APT Exploits WinRAR Flaw to Deploy Telegram C2 Backdoor

   A report from CyberArmor details an espionage campaign named "Autumn Dragon," attributed to a China-nexus threat actor, targeting government and media organizations in Southeast Asia since early 2025. The operation employs a four-stage malware chain…

   SecurityOnline