News

Tue 16 Dec 2025· 51 articles

1. 01:58

   Critical FortiGate SSO Flaw Under Active Exploitation: Attackers Bypass Auth and Exfiltrate Configs

   A critical Fortinet FortiGate SSO flaw is being actively exploited, with attackers bypassing authentication to log in as administrators via Single Sign-On and exfiltrate configurations, according to Arctic Wolf. The attacks, beginning on 12 December 2025,…

   SecurityOnline
   
2. 01:45

   5-Year Threat: Malicious NuGet Package Used Homoglyphs and Typosquatting to Steal Crypto Wallets

   A malicious NuGet package masquerading as a popular .NET logging tool has been caught stealing cryptocurrency wallet data for over five years. The package, Tracer.Fody[.]NLog, evaded detection by using homoglyphs and typosquatting to fool developers into…

   SecurityOnline
   
3. 00:40

   macOS LPE Flaw Resurfaces: .localized Directory Exploited to Hijack Installers and Gain Root Access

   The macOS LPE flaw resurfaced in December 2025, describing a vulnerability in third‑party installers that can hijack privileged processes and gain root access. The exploit relies on how macOS handles naming conflicts, where an installer placing an…

   SecurityOnline
   
4. 00:32

   Frogblight Android Banking Trojan Targets Turkey via Fake E-Gov Smishing and WebView

   A new Android banking Trojan named Frogblight has been discovered targeting individuals in Turkey, masquerading as official government applications to harvest financial data, according to Kaspersky researchers who first identified the malware in August 2025.…

   SecurityOnline
   
5. 00:27

   Phantom Stealer Targets Russian Finance with ISO Phishing, Deploying Keyloggers and Crypto-Wallet Theft

   A new phishing campaign aimed at Russia’s financial sector, dubbed Operation MoneyMount-ISO by Seqrite Labs, uses ISO-mounted executables to deliver the Phantom Stealer information-stealing malware, targeting finance, accounting and treasury departments with…

   SecurityOnline
   
6. 00:22

   PyStoreRAT Uncovered: Fileless RAT Hides in Fake GitHub Repos to Launch Invisible Attacks on Developers

   Morhisec Threat Labs has uncovered PyStoreRAT, a fileless Remote Access Trojan that hides in seemingly legitimate Python projects on GitHub to launch invisible attacks on developers and OSINT practitioners. Active since mid-2025, the campaign lures victims…

   SecurityOnline
   
7. 00:15

   BlackForce PhaaS Weaponizes React and Stateful Sessions to Bypass MFA & Steal Credentials

   BlackForce is a PhaaS kit described as a sophisticated toolset that bypasses MFA and steals credentials, with researchers noting its use of a deceptive, legitimate-looking codebase to mimic real enterprise web development. It first emerged in August 2025 and…

   SecurityOnline
   
8. 00:10

   From Cisco Student Rivalry to Global Hackers: Salt Typhoon Breaches 80+ Telecos for Intelligence

   According to SentinelLabs, the Salt Typhoon group began as Cisco Networking Academy competitors whose training was later weaponised to target global telecommunications infrastructure. First detected in September 2024, the campaign has penetrated over 80…

   SecurityOnlineGhostEmperor
   
9. 00:06

   SpaceX IPO: Company Prepares for 2026 Listing After Valuation Soars to $800 Billion

   According to the Wall Street Journal, SpaceX has begun the process of selecting investment banks as part of a potential listing, with senior executives set to interview this week and a 2026 listing eyed. The company’s internal memo from Chief Financial…

   SecurityOnline
   
10. 00:03

    Data Disaster: Claude AI Executes rm -rf ~/ and Wipes Developer’s Mac Home Directory

    A recent cautionary tale highlights how Claude AI’s command line interface can cause extensive data loss when a trailing tilde is expanded to a user’s home directory. According to the piece, a developer using Claude CLI to clean up an old repository…

    SecurityOnline
    
11. 00:00

    Intel Nears SambaNova Acquisition at $1.6B Fire-Sale Price, Down from $5B Valuation

    Intel Nears SambaNova Acquisition at a $1.6B fire-sale price, down from a $5B valuation, with reports suggesting the deal could close near the latter figure if completed. In November, it was reported that Intel was considering a $5 billion acquisition to…

    SecurityOnline