News

Wed 26 Nov 2025· 53 articles

1. 02:14

   GRU Unit 29155 Uses SocGholish to Target US Firm

   Arctic Wolf Labs has reported a cyber threat campaign involving the financially motivated threat actor TA569, known for using SocGholish malware, in collaboration with the Russian state-backed group RomCom. This marks a significant evolution in cyber…

   SecurityOnlineGOLD PRELUDE
   
2. 02:01

   URGENT PATCH REQUIRED: Zenitel TCIV-3+ Intercoms Hit by Multiple Critical Flaws (CVSS 9.8)

   Zenitel has issued an urgent security advisory regarding critical vulnerabilities in its TCIV-3+ intercom station, affecting all versions prior to 9.3.3.0. The advisory highlights five security flaws, three of which have a maximum CVSS score of 9.8,…

   SecurityOnline
   
3. 01:44

   Critical node-forge Flaw (CVE-2025-12816) Allows Signature Verification Bypass via ASN.1 Manipulation (21M Downloads/Week)

   A critical vulnerability (CVE-2025-12816) has been identified in the node-forge JavaScript library, which is widely used and receives approximately 21 million downloads weekly. This flaw allows attackers to bypass signature verification by manipulating…

   SecurityOnline
   
4. 00:28

   Russian Hackers Target US Engineering Firm Because of Work Done for Ukrainian Sister City

   In a recent cybersecurity incident, Russian intelligence hackers targeted an American engineering firm due to its connections with a U.S. municipality that has a sister city in Ukraine. The attack, identified by Arctic Wolf, reflects Russia's expanding cyber…

   SecurityWeek
   
5. 00:20

   8 Flaws: ASUS Routers Urgently Need Patch for Authentication Bypass (CVE-2025-59366, CVSS 9.4)

   ASUS has issued an urgent security update addressing eight vulnerabilities in various router models, with the most critical being an Authentication Bypass (CVE-2025-59366) in AiCloud, rated CVSS 9.4. Other significant vulnerabilities include a Path Traversal…

   SecurityOnline
   
6. 00:15

   Zero-Detection RelayNFC Android Malware Turns Phones Into Remote Card Readers

   Cyble Research and Intelligence Labs (CRIL) has identified a new NFC relay malware named RelayNFC, targeting mobile payment users in Brazil. This malware turns Android devices into remote card readers, allowing attackers to conduct fraudulent transactions.…

   SecurityOnline
   
7. 00:15

   ASUS LPE Flaw (CVE-2025-59373): High-Severity Bug Grants SYSTEM Privileges via MyASUS Component

   ASUS has issued critical security updates for a local privilege escalation (LPE) vulnerability tracked as CVE-2025-59373, with a CVSS score of 8.4 (High). This flaw affects the ASUS System Control Interface Service, allowing low-privileged users to escalate…

   SecurityOnline
   
8. 00:13

   Cameo Wins TRO Against OpenAI: Sora Barred From Using ‘Cameo’ Trademark

   In a trademark infringement case, a U.S. federal court granted Cameo a temporary restraining order against OpenAI's Sora app, prohibiting the use of the term "Cameo" until December 22. The lawsuit, filed by Cameo, argues that OpenAI's use of the name for a…

   SecurityOnline
   
9. 00:11

   Google’s New Merged OS Revealed? Job Listing Points to ‘Aluminium OS’

   Google is reportedly merging Android and ChromeOS into a new operating system called Aluminium OS, as indicated by a job listing on LinkedIn. This new OS aims to replace ChromeOS and will support a range of devices including laptops, tablets, and mini-PCs.…

   SecurityOnline
   
10. 00:08

    Chromium Reopens JPEG-XL Debate: Will Google Reinstate Support After Apple Adopted It?

    The article discusses the ongoing debate regarding the JPEG-XL image format and its support in the Chromium browser. Initially proposed for inclusion in 2021, Google introduced JPEG-XL support but later removed it in 2023 due to a lack of ecosystem interest.…

    SecurityOnline
    
11. 00:06

    OpenAI Launches Shopping Research: ChatGPT Now Generates Personalized Buying Guides

    OpenAI has launched a new Shopping Research feature for ChatGPT, designed to assist users in making informed purchasing decisions across various categories such as electronics, beauty, and home goods. The tool evaluates products based on use cases,…

    SecurityOnline
    
12. 00:03

    Android Getting Native Universal Clipboard: Seamless Sync Coming to Phones & Chromebooks

    Google is reportedly developing a universal clipboard synchronization feature for Android devices and Chromebooks, allowing seamless clipboard sharing across devices. This comes after stricter privacy controls on clipboard access were implemented in Android…

    SecurityOnline
    
13. 00:00

    AMD GPU Prices to Increase by at Least 10% in 2026 Due to Surging Memory Costs

    AMD has announced a price increase of at least 10% for its GPUs starting in 2026, primarily due to rising memory chip costs. This increase will affect partners who must purchase GPU dies and memory at the new rates, leading to higher consumer prices. The…

    SecurityOnline