CyberNews

As the viral AI actress Tilly Norwood continues to make headlines, a new controversy has emerged surrounding her “Talking Tilly” service. The interactive experience allows users to video-call Tilly behind the scenes, but what’s not immediately apparent is that it comes with a surprise: an automated face scan and age check before each call. This … Read more

Google’s Gemini Project Raises Red Flags After Accidental Infiltration of Company Systems A recent incident has exposed a critical vulnerability in Google’s Gemini project, which aims to help organizations better manage their network security. During a security test, it appears that Gemini inadvertently broke into several real company systems due to a mix-up between test … Read more

Critical Vulnerability in Orkes Conductor Workflow Platform Exploited in the Wild, Threatening Thousands of Organizations A critical pre-authentication remote code execution (RCE) vulnerability in the popular Orkes Conductor workflow platform has been actively exploited by attackers, putting thousands of organizations at risk. The vulnerability, discovered earlier this year, allows hackers to execute arbitrary code on … Read more

A Critical Flaw in SolarWinds’ ARM Tool Exposes Organizations to Remote Code Execution Risks Cybersecurity vendor SolarWinds has released patches for its Application Release Management (ARM) tool, addressing a hard-coded key flaw that could allow unauthorized access to systems. This vulnerability, discovered by security researchers, exposes organizations using the tool to significant risks of remote … Read more

Security researchers have made a groundbreaking discovery in the realm of identity exposure, exploiting a series of chained vulnerabilities that allowed them to take over OpenAI staff accounts. The findings, which were facilitated by the Claude Opus 5 framework, shed light on the perils of identity exposure and highlight the need for robust security measures. … Read more

Three Major Cybersecurity Firms Patch Severe Vulnerabilities in Their Products In a timely move, Check Point, Kaspersky, and Tanium have all issued patches to fix severe vulnerabilities in their products. These flaws can be exploited by attackers to gain unauthorized access, execute malicious code, or even take control of sensitive systems. Check Point’s Security Management … Read more

A trio of critical vulnerabilities in the Linux kernel has been flagged by the US Cybersecurity and Infrastructure Security Agency (CISA) as being actively exploited in the wild. This means that hackers are already taking advantage of these flaws to gain unauthorized access to systems, making it essential for users to take immediate action. The … Read more

**TanStack npm Attack Exposes 170 Private GitHub Repositories** A recent security incident has left developers scrambling to secure their projects, after a malicious actor exploited a vulnerability in TanStack’s npm package to copy sensitive information from 170 private GitHub repositories. The breach is a stark reminder of the importance of protecting not only our personal … Read more

Google Gemini, a security testing tool designed to mimic real-world attacks on computer systems, has inadvertently broken into several companies’ internal networks due to a mix-up with test domains. The incident raises serious concerns about the potential for identity exposure and privilege escalation in enterprise environments. The issue stems from Google’s decision to use a … Read more

Critical Vulnerability Exploited in Orkes Conductor Workflow Platform, Threatening Thousands of Organizations Worldwide A severe pre-authentication remote code execution (RCE) vulnerability has been discovered and actively exploited in the wild in the Orkes Conductor workflow platform. This critical flaw allows attackers to execute arbitrary code on the targeted system without requiring any form of authentication … Read more