CVE-2026-58138: Critical Pre-Auth Remote Code Execution in Orkes Conductor Workflow Platform Under Active Exploitation
Date: September 21, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Vulnerability Research / Zero-Day & N-Day Analysis / Cloud Sec...
Zero-Click Baseband Execution: Google Pixel Modem Flaw (CVE-2026-58704) Exploited in Targeted Attacks
Author: DigitalSpying Security Desk
Date: September 20, 2026
Category: Mobile Security / Baseband Firmware / Zero-Click Exploits
In a critic...
The Linux Kernel Triple Threat: CISA Flags Three Actively Exploited Network Flaws as Red Hat Issues Urgent Alert
Author: DigitalSpying Security Desk
Date: September 20, 2026
Category: Linux Kernel Security / Zero-Day Exploitation / Cloud & Network Infrastructure
Author: DigitalSpying Security Desk
Date: September 20, 2026
In an urgent enterprise infrastructure advisory impacting perimeter security across global corporations, cybersecurity leader Check Point has released emergency patches for a critical remote code...
Autonomous Shells and AI Eyes: How RatHat Android Trojan Uses Wireless ADB and Generative Vision to Shatter App Sandboxes
Author: DigitalSpying Security Desk
Date: September 20, 2026
Category: Mobile Security / Android Threat Intelligence / Generative AI Malware
Beyond Install Scripts: How the "indexed-btree" npm Campaign Leverages Runtime Execution and Blockchain C2 to Evade Defenses
Author: DigitalSpying Security Desk
Date: September 20, 2026
Category: Software Supply Chain Security / Web Application Defense / Open Source Threat In...
Author: DigitalSpying Security Desk
Date: September 20, 2026
In a critical security bulletin highlighting the persistent hazard of hard-coded cryptographic credentials in enterprise identity software, SolarWinds has released maintenance updates for SolarWi...
Multi-Tenant Hosting at Risk: Acronis cPanel Backup Plugin Flaw (CVE-2026-87886) Exploited to Gain Server Root
Author: DigitalSpying Security Desk
Date: September 20, 2026
Category: Web Hosting Security / Local Privilege Escalation / Server Infrastructure
Author: DigitalSpying Security Desk
Date: September 20, 2026
In an extraordinary real-world case study illustrating how frontier artificial intelligence models are fundamentally altering the economics of offensive cyber operations, security researchers at ...
The Long Tail of Supply-Chain Compromise: How a Backdoored TanStack npm Package Exposed 170 Private CrowdSec Repositories
Author: DigitalSpying Security Desk
Date: September 20, 2026
Category: Software Supply Chain Security / Developer Workstation Exploitation / Cloud Securit...
Gyazo Server Vulnerability Exploited to Steal 23.6 Million User Records and 490 Million Image Metadata Entries
Author: DigitalSpying Security Desk
Date: September 19, 2026
Category: Data Breaches / Web Application Security / Cloud Infrastructure
Author: DigitalSpying Security Desk
Date: September 19, 2026
In a major infrastructure alert affecting enterprise servers, cloud clusters, and containerized environments worldwide, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added ...