CyberNews A Core Member of Scattered Spider Pleads Guilty to Extortion Attacks, Faces Millions in Forfeiture In a significant blow to one of the most notorious subsets of The Com, Ahmed Hossam Eldin Elbadawy, a 24-year-old from Texas, has pleaded guilty to federal charges related to a string of extortion attacks. Between 2021 and 2023, Elbadawy … Read more
Critical Flaws Found in Check Point, Kaspersky, and Tanium Products – What You Need to Know A trio of major cybersecurity companies has issued patches for severe vulnerabilities in their products, raising concerns among users about potential exploitation by threat actors. Check Point, Kaspersky, and Tanium have all acknowledged critical flaws that could allow attackers … Read more
A Critical Vulnerability in Orkes Conductor Exposes Organizations to Remote Code Execution Attacks A critical vulnerability in the open-source unified enterprise framework Orkes Conductor has been exploited by attackers in recent weeks. The flaw, tracked as CVE-2026-58138 and rated 9.8 on the CVSS scale, allows unauthenticated attackers to execute arbitrary system commands, potentially leading to … Read more
A trio of serious security vulnerabilities has been discovered in Linux kernel versions, and it’s already being exploited by attackers. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that three critical flaws could be used to gain elevated access on vulnerable systems, potentially leading to data breaches. The vulnerabilities, identified as … Read more
Cybersecurity firm CrowdSec has revealed a disturbing incident in which an attacker exploited a vulnerability in the TanStack npm package, leading to the unauthorized copying of 170 private GitHub repositories. The breach highlights the importance of vigilance and proper configuration in software development pipelines. The attack occurred when the attacker manipulated the TanStack package, which … Read more
MIND Secures $72 Million for AI-Powered DLP, Redefining Data Security in the Age of AI Cybersecurity startup MIND has just closed a whopping $72 million Series B funding round, bringing its total raised to a staggering $112 million. The investment will be used to accelerate platform development, expand into key enterprise markets, and scale the … Read more
A Critical Vulnerability in Orkes Conductor Exposed Organizations to Remote Attacks A severe vulnerability in the popular open-source framework Orkes Conductor has been exploited by attackers for several weeks, leaving many organizations vulnerable to remote code execution attacks. The flaw, tracked as CVE-2026-58138 with a CVSS score of 9.8, was patched in June but proof-of-concept … Read more
A massive supply chain attack has compromised over 100,000 websites by injecting malware through a customer engagement platform called Brevo. The attackers exploited a vulnerability in Brevo’s handling of security protocols to access hundreds of accounts, including one belonging to cryptocurrency storage provider Trezor, and used this access to deploy malicious code on multiple websites. … Read more
The NightmareStresser DDoS Service Has Been Disrupted in a Major International Operation In a significant blow to cybercrime, authorities have disrupted one of the world’s longest-running distributed denial-of-service (DDoS) for-hire services, NightmareStresser. The US Department of Justice announced this week that the FBI has seized the internet domains associated with the booter service, effectively putting … Read more
Microsoft has released patches to address 18 critical vulnerabilities across its cloud and artificial intelligence (AI) products, including Azure cloud services and Copilot-branded AI tools. These flaws could have allowed attackers to elevate privileges, disclose sensitive information, or even spoof legitimate Microsoft websites. The affected products include Azure ARC, Azure AI Foundry, Azure Logic Apps, … Read more