News

Mon 8 Dec 2025· 49 articles

1. 00:33

   Stealth Supply Chain Attack: Malicious Rust Crate Used Unpinned Dependency for Silent Payload Upgrades

   A stealth supply chain attack targeted Rust developers with a malicious package disguised as a legitimate library, finch-rust, which mimicked the finch genomics tool. The loader declared a dependency on another malicious package, sha-rust, using an unpinned…

   SecurityOnline
   
2. 00:30

   CISA/NSA Warn of BRICKSTORM Backdoor: China APT Targets VMware and ADFS for Long-Term Espionage

   According to The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the National Security Agency (NSA) and the Canadian Centre for Cyber Security, BRICKSTORM is a sophisticated backdoor used by actors linked to the PRC for…

   SecurityOnline
   
3. 00:26

   High-Severity lz4-java Flaw (CVE-2025-66566) Leaks Uninitialized Memory During Decompression

   A high-severity flaw in lz4-java, tracked as CVE-2025-66566, allows a Java decompressor to read uninitialized output-buffer memory, potentially exposing sensitive data from previous operations. The advisory notes that the risk arises from insufficient…

   SecurityOnline
   
4. 00:22

   Critical Cal.com Flaw (CVE-2025-66489, CVSS 9.9) Allows Authentication Bypass by Submitting Fake TOTP Codes

   The article reports a critical flaw in Cal[.]com, tracked as CVE-2025-66489 with a CVSS score of 9.9, that could allow attackers to bypass authentication, including password verification and 2FA. At the core is a logic error in the authorize() function where…

   SecurityOnline
   
5. 00:20

   High-Severity WatchGuard Flaws Risk VPN DoS and RCE via IKEv2 Memory Corruption

   According to WatchGuard Technologies, a critical series of vulnerabilities across its Firebox product line in Fireware OS could allow attackers to crash VPN services, execute arbitrary code, and inject malicious commands into the management interface. One of…

   SecurityOnline
   
6. 00:18

   Iran-Linked MuddyWater Deploys UDPGangster Backdoor, Using UDP Protocol for Covert C2

   A new campaign attributed to the Iranian-linked MuddyWater group has been revealed, deploying UDPGangster, a backdoor that communicates exclusively over UDP to enable covert C2. The operation targets government and critical infrastructure entities across…

   SecurityOnlineMuddyWater
   
7. 00:12

   Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via “smack” iOS Exploit Chain

   According to Google Threat Intelligence Group (GTIG), the mercenary spyware vendor Intellexa has built a record of exploiting zero‑days since 2021, with about 70 zero‑day vulnerabilities tracked in the wild and 15 of them attributed specifically to…

   SecurityOnline
   
8. 00:06

   urllib3 Flaws Risk Client DoS via Unbounded Decompression and Streaming Resource Exhaustion

   The maintainers of urllib3 have issued a security advisory detailing two high-severity vulnerabilities that could allow malicious servers to crash client applications via resource exhaustion. Both flaws carry a CVSS score of 8.9 (High) and affect millions of…

   SecurityOnline
   
9. 00:00

   ValleyRAT Targets English Job Seekers by Trojanizing Foxit PDF Reader with DLL Sideloading

   ValleyRAT is being used in a campaign that targets English-speaking job seekers and human resources professionals, according to Trend Micro. The attack leverages weaponized versions of Foxit PDF Reader and uses DLL sideloading to deliver the malware, with…

   SecurityOnline