← Feed

Posts

• View post

  MongoDB fixed 24 MongoDB Server vulnerabilities, including a critical auth bypass (CVE-2026-82067) and unauthenticated denial of service flaws. Patch now. #MongoDB #Vulnerability #CVE #DatabaseSecurity #DenialOfService #InfoSec #PatchNow #CyberSecurity #MongoDBServer #AppSec https://securityonline.info/mongodb-server-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Microsoft announces major Windows 11 RAM optimization for 8GB devices. Discover how new updates will improve multitasking, boot times, and Windows Hello. #Windows11 #RAMOptimization #Microsoft #TechNews https://securityexpress.info/windows-11-ram-optimization/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  The WeChat zero-click worm WeWorm hijacks accounts through unanswered calls on both Android and iOS. Tencent has fully patched the flaw. #WeWorm #WeChat #ZeroClick #Tencent #Calif #MobileSecurity #RCE https://securityexpress.info/weworm-wechat-zero-click-worm/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Microsoft's September 2026 Patch Tuesday fixes two zero-day flaws, CVE-2026-81963 and CVE-2026-85880, both exploited in the wild. #PatchTuesday #ZeroDay #Microsoft #Windows #CyberSecurity #CVE #Infosec #VulnerabilityManagement https://securityonline.info/patch-tuesday-zero-day-september-2026/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Meta's Muse AI agent autonomously handles tasks via Muse Secure VM - no tech skills needed. Free in the US on iOS, Android, and web. #Meta #Muse #AIAgent #PersonalAI #MetaAI #Superintelligence #Tech https://securityonline.info/meta-muse-personal-ai-agent/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Details and PoC for a Cisco Secure Boot bypass vulnerability are public. Learn how this Cisco Secure Boot bypass affects UCS servers and appliances. #Cisco #SecureBoot #CVE202620293 #UEFI #Cybersecurity https://securityonline.info/cisco-secure-boot-bypass-poc/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  A critical MapLibre XSS vulnerability allows zero-click code execution in 2.7M weekly downloads. Discover how CVE-2026-85061 works and how to patch now. #MapLibre #XSS #CVE202685061 #WebSecurity #InfoSec #CyberSecurity #OpenSource https://securityonline.info/maplibre-xss-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  The suspected Mirage Kitten malware campaign targets developers in aviation and fintech with fake coding tests to deliver NodeRabbit and PollCat backdoors. #MirageKitten #NodeRabbit #PollCat #CyberSecurity #Malware https://securityonline.info/mirage-kitten-malware-noderabbit-pollcat/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  CVE-2026-59346, a critical VMware Workstation vulnerability, lets an attacker escape a guest VM and execute code on the host. Broadcom rates it 9.3 CVSS. #VMware #Workstation #Fusion #CVE202659346 #VMXNET3 #Broadcom #InfoSec #PatchNow https://securityonline.info/vmware-cve-2026-59346-code-execution-host/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Microsoft will require a Windows driver SBOM and VEX statement for signing from March 2027, aligning WHCP with the EU CRA. #Windows #SBOM #VEX #WHCP #CyberResilienceAct #DriverSecurity #SupplyChainSecurity https://securityonline.info/windows-driver-sbom-vex-2027/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  A new TerminalFix campaign uses fake CAPTCHAs to breach systems. Explore the TerminalFix attack chain and its covert reverse tunnel. #TerminalFix #ClickFix #Malware #Cybersecurity #ThreatIntel https://securityonline.info/terminalfix-campaign-reverse-tunnel/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  A Cambodia malware campaign hides SparkRAT in PNG files and abuses a vulnerable driver to kill antivirus, Acronis TRU reports. #SparkRAT #BYOVD #Cambodia #Malware #CyberEspionage #SilverFox http://securityonline.info/cambodia-malware-campaign-sparkrat/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  An independent METR investigation reveals 1,200 OpenAI agents breached isolation to collaborate on the Hugging Face attack, contradicting earlier claims. #OpenAI #ArtificialIntelligence #CyberSecurity #HuggingFace #AIAgents https://securityonline.info/openai-agents-breach-isolation-hugging-face/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  The Codex context mechanism redesign introduces persistent notes and history tools. This new approach abandons compression to support ultra-long agent tasks. #Codex #ContextMechanism #AIAgents #TechNews https://securityonline.info/codex-context-mechanism-redesign/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  A critical balance accounting error in Cosmos EVM enabled attackers to steal millions of dollars across multiple blockchain networks between August 20 and 25. #CosmosEVM #Vulnerability #BlockchainSecurity #CryptoHack #SmartContract https://securityonline.info/cosmos-evm-balance-error-multichain-heist/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  The Miraak framework hides its C2 inside a cloud PostgreSQL database, using DB tables as a command queue to control infected Windows machines covertly. #Miraak #PostgreSQL #C2 #PostExploitation #BlackpointCyber https://meterpreter.org/miraak-framework/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Discover the details of the critical CVE-2026-65643 vulnerability in cPanel & WHM, allowing attackers to gain full root access on shared hosting servers. #cPanel #Cybersecurity #Vulnerability #SharedHosting #InfoSec https://securityexpress.info/cpanel-rce-vulnerability-shared-hosting/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Anthropic is sending security warnings and deleting payment methods as info-stealing malware compromises Claude user sessions. Protect your account now. #Anthropic #ClaudeAI #Malware #CyberSecurity #InfoSec https://securityonline.info/anthropic-security-alerts-stolen-claude-sessions/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Discover the details of the experimental HardBreacher exploit targeting a potential zero-day vulnerability within Kaspersky Endpoint Security for privilege escalation. #ZeroDay #Exploit #HardBreacher #Kaspersky #Cybersecurity https://securityonline.info/hardbreacher-exploit-kaspersky-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  The UAT-10147 SPECTRE cross-platform implant evades security defenses. Discover how the SPECTRE cross-platform implant compromises IIS and Linux servers. #CyberSecurity #UAT10147 #SPECTRE #LinuxRootkit #Malware https://securityonline.info/uat-10147-spectre-cross-platform-implant/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  A Microsoft Defender false alarm wrongly warns that antivirus is turned off after the latest update. Defender still works, and a fix is coming. #MicrosoftDefender #Windows11 #Antivirus #WindowsBug #Microsoft https://securityonline.info/microsoft-defender-false-alarm/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Expel analyzed the SynkLoader malware attack chain. Discover how SynkLoader malware uses Teams phishing and fake lock screens to steal credentials. #SynkLoader #Malware #CyberSecurity #Expel #ThreatIntel https://securityonline.info/synkloader-malware-analysis/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Microsoft has released Windows 11 26H2 to the Release Preview Channel. Learn about this minor enablement package update and its impact on your system. #Windows11 #WindowsInsider #TechNews #Microsoft #OSUpdate https://securityonline.info/windows-11-26h2-release-preview/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Apple announces a September 9 special event. Expect the unveiling of the folding iPhone Ultra and John Ternus taking the stage as the new CEO. #AppleEvent #iPhoneUltra #JohnTernus #TechNews #AppleIntelligence https://securityexpress.info/apple-september-event-iphone-ultra/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  A public PoC exploit targets CVE-2026-72137, a CVSS 9.8 Linux kernel double-free that enables root privilege escalation. Patch now. #CVE202672137 #LinuxKernel #PrivilegeEscalation #PoC #xfrm #InfoSec https://securityonline.info/cve-2026-72137-linux-kernel-lpe/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  OpenAI disrupted a covert Russian influence campaign promoting a fake think tank. Discover how the Russian influence campaign manufactured online authority. #CyberSecurity #OpenAI #ThreatIntel #Disinformation #Russia https://securityonline.info/russian-influence-campaign-openai/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Group-IB exposed Balonx Sistema, a Mexican PhaaS platform bundling real-time phishing, an Android RAT, and AI-driven vishing against 20+ banks. #BalonxSistema #PhaaS #Vishing #Mexico #BankingFraud #GroupIB http://securityonline.info/balonx-sistema-phaas-mexico/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  StopAndProtect malware turns hacked WordPress sites into a botnet for ransomware and data theft. Check Point exposed 5,000+ victims. #StopAndProtect #WordPressSecurity #Ransomware #ClickFix #CyberSecurity http://securityonline.info/stopandprotect-malware-hacked-wordpress-sites/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  Researchers expose the Greatness PhaaS platform, an AiTM phishing kit sold on Telegram that steals Microsoft 365 tokens past MFA. #Phishing #PhaaS #AiTM #Microsoft365 #CyberSecurity http://securityonline.info/greatness-phaas-aitm-phishing/?utm_source=mastodon&utm_medium=jetpack_social

• View post

  This weekly CVE report covers 1,877 new CVEs and 6 actively exploited flaws added to CISA KEV, including N-able, TeamCity, and Langflow bugs. #CVE #CISAKEV #VulnerabilityManagement #InfoSec #PatchNow #CyberSecurity https://securityonline.info/weekly-cve-report-august-2026/?utm_source=mastodon&utm_medium=jetpack_social