Three Major Cybersecurity Firms Patch Severe Vulnerabilities in Their Products In a timely move, Check Point, Kaspersky, and Tanium have all issued patches to fix severe vulnerabilities in their products. These flaws can be exploited by attackers to gain unauthorized access, execute malicious code, or even take control of sensitive systems. Check Point’s Security Management … Read more
A trio of critical vulnerabilities in the Linux kernel has been flagged by the US Cybersecurity and Infrastructure Security Agency (CISA) as being actively exploited in the wild. This means that hackers are already taking advantage of these flaws to gain unauthorized access to systems, making it essential for users to take immediate action. The … Read more
**TanStack npm Attack Exposes 170 Private GitHub Repositories** A recent security incident has left developers scrambling to secure their projects, after a malicious actor exploited a vulnerability in TanStack’s npm package to copy sensitive information from 170 private GitHub repositories. The breach is a stark reminder of the importance of protecting not only our personal … Read more
Google Gemini, a security testing tool designed to mimic real-world attacks on computer systems, has inadvertently broken into several companies’ internal networks due to a mix-up with test domains. The incident raises serious concerns about the potential for identity exposure and privilege escalation in enterprise environments. The issue stems from Google’s decision to use a … Read more
Critical Vulnerability Exploited in Orkes Conductor Workflow Platform, Threatening Thousands of Organizations Worldwide A severe pre-authentication remote code execution (RCE) vulnerability has been discovered and actively exploited in the wild in the Orkes Conductor workflow platform. This critical flaw allows attackers to execute arbitrary code on the targeted system without requiring any form of authentication … Read more
A Core Member of Scattered Spider Pleads Guilty to Extortion Attacks, Faces Millions in Forfeiture In a significant blow to one of the most notorious subsets of The Com, Ahmed Hossam Eldin Elbadawy, a 24-year-old from Texas, has pleaded guilty to federal charges related to a string of extortion attacks. Between 2021 and 2023, Elbadawy … Read more
Critical Flaws Found in Check Point, Kaspersky, and Tanium Products – What You Need to Know A trio of major cybersecurity companies has issued patches for severe vulnerabilities in their products, raising concerns among users about potential exploitation by threat actors. Check Point, Kaspersky, and Tanium have all acknowledged critical flaws that could allow attackers … Read more
A Critical Vulnerability in Orkes Conductor Exposes Organizations to Remote Code Execution Attacks A critical vulnerability in the open-source unified enterprise framework Orkes Conductor has been exploited by attackers in recent weeks. The flaw, tracked as CVE-2026-58138 and rated 9.8 on the CVSS scale, allows unauthenticated attackers to execute arbitrary system commands, potentially leading to … Read more
A trio of serious security vulnerabilities has been discovered in Linux kernel versions, and it’s already being exploited by attackers. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that three critical flaws could be used to gain elevated access on vulnerable systems, potentially leading to data breaches. The vulnerabilities, identified as … Read more
Cybersecurity firm CrowdSec has revealed a disturbing incident in which an attacker exploited a vulnerability in the TanStack npm package, leading to the unauthorized copying of 170 private GitHub repositories. The breach highlights the importance of vigilance and proper configuration in software development pipelines. The attack occurred when the attacker manipulated the TanStack package, which … Read more