News

Tue 20 Jan· 50 articles

1. 01:42

   Critical Flaw in “Advanced Custom Fields: Extended” Exposes 100K WordPress Sites to Takeover

   A critical vulnerability has been found in Advanced Custom Fields: Extended, a WordPress plugin with over 100,000 active installations, tracked as CVE-2025-14533 and rated near-maximum on the CVSS scale at 9.8, allowing unauthenticated attackers to escalate…

   SecurityOnline
   
2. 00:48

   Discord Spy: SolyxImmortal Malware Uses Webhooks for Stealthy Theft

   SolyxImmortal is a Python-based Windows information-stealing malware described as a single, self-contained package that focuses on persistence and stealth over rapid destructive action. According to CYFIRMA, it uses hardcoded webhooks on Discord for its…

   SecurityOnline
   
3. 00:40

   Malformed & Dangerous: Gootloader Returns with New Ransomware Ties

   According to Expel, after a mysterious hiatus the Gootloader malware has returned with a new alliance to ransomware operators and a delivery method designed to defeat automated tools by using a deliberately malformed ZIP archive. The report notes that the…

   SecurityOnlineVanilla Tempest
   
4. 00:35

   PDFSIDER Discovered: New APT Malware Uses DLL Side-Loading to Evade Detection

   PDFSIDER, a newly identified APT malware variant, was uncovered by Resecurity and uses DLL side-loading to evade detection. The attack starts with a counterfeit library, with PDFSIDER distributing itself via a malicious ZIP archive often masquerading as…

   SecurityOnline
   
5. 00:27

   Operation Poseidon: Konni APT Hijacks Google & Naver Ads for Malware

   According to Genians Security Center, researchers have exposed Operation Poseidon, a sophisticated campaign attributed to the Konni APT group, which hijacks Google and Naver ads to deliver malware. The attackers weaponise legitimate ad-click redirection…

   SecurityOnline
   
6. 00:22

   Industrial Alert: Critical RCE in AVEVA Software Rated CVSS 10

   AVEVA has issued a critical alert for its Process Optimization software (formerly ROMeo), detailing multiple vulnerabilities, including a Remote Code Execution (RCE) flaw with a maximum CVSS score of 10.0 (CVE-2025-61937) that could allow an unauthenticated…

   SecurityOnline
   
7. 00:16

   Spy vs. Spy: Predator Malware Now Hunts the Researchers

   In a 20 January 2026 report by Jamf Threat Labs, researchers uncovered anti‑analysis mechanisms within Intellexa’s Predator spyware, revealing a level of self‑preservation that turns the tables on defenders. The analysis highlights a C++ class named…

   SecurityOnline
   
8. 00:12

   WhisperPair: Critical Fast Pair Flaw Exposes Headphones to Hijacking

   WhisperPair is a flaw in Google Fast Pair uncovered by researchers from KU Leuven’s Computer Security and Industrial Cryptography group, exposing hundreds of millions of flagship audio devices to hijacking and tracking. The attack stems from a chain of…

   SecurityOnline
   
9. 00:06

   Trojanized PDF Editor: “TamperedChef” Campaign Bypasses Windows SmartScreen

   Sophos X-Ops revealed a malvertising campaign, dubbed TamperedChef, that promotes a Trojanized “AppSuite PDF Editor” to deploy an infostealer to Windows devices. Detected in September 2025, the operation is linked to EvilAI and used Google Ads to reach users…

   SecurityOnline
   
10. 00:01

    Fake Windows Executables Target macOS: Inside the “MonetaStealer” Discovery

    A new macOS threat named MonetaStealer has been discovered masquerading as a Windows executable, with the sample arriving as Portfolio_Review.exe and identified as an unsigned Mach-O binary. According to the analysis, it uses PyInstaller to bundle a Python…

    SecurityOnline