Author: DigitalSpying Security Desk
Date: September 19, 2026
Category: Vulnerability Research / Linux Kernel Security / Local Privilege Escalation
The Linux ecosystem faces an urgent security posture reassessment following the public release of weap...
Orkes Conductor Pre-Auth RCE Under Active Exploitation: The GraalVM HostAccess Flaw Blinding Enterprise Workflows
Author: DigitalSpying Security Desk
Date: September 19, 2026
Category: Zero-Day Vulnerabilities / Cloud & Web Application Security
Author: DigitalSpying Security Desk
Date: September 19, 2026
In a compelling real-world case study illustrating the dangerous, multi-month "delayed blast radius" of open-source package ecosystem attacks, French cybersecurity firm CrowdSec confirmed that an...
Extortionists Extorted: ShinyHunters Breaches Clop Ransomware Leak Site and Seizes Tor Private Keys
Author: DigitalSpying Security Desk
Date: September 19, 2026
Category: Darknet & Cybercrime / Ransomware Threat Intelligence / Web Application Security
Inside WaterPlum: How North Korean APT Actors Compromised 30,000 Developer Devices Through Fake Tech Interviews
Author: DigitalSpying Security Desk
Date: September 19, 2026
Category: Threat Intelligence / Advanced Persistent Threats (APT) / Software Supply Chain Security
...Author: DigitalSpying Security Desk
Date: September 19, 2026
In a critical threat advisory impacting enterprise cloud orchestration and microservices architectures, cybersecurity firm Fortinet has issued an outbreak alert warning of massive, active exploit...
Author: DigitalSpying Security Desk
Date: September 19, 2026
Category: Zero-Day Vulnerabilities / Enterprise Network Security / Identity & Access Management
A critical zero-day vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Pass...
In one of the most consequential security research disclosures of 2026, offensive security research firm Hacktron AI has published the full anatomy of the "HEIF Heist"—a multi-stage exploit chain that all...
Author: DigitalSpying Security Desk
Date: September 18, 2026
In a crucial vulnerability disclosure impacting modern software developers and AI engineers, Docker has published security updates addressing two severe vulnerabilities in Docker Sandboxes on mac...
Author: DigitalSpying Security Desk
Date: September 18, 2026
In a coordinated multinational law enforcement crackdown targeting cybercrime infrastructure, the United States Federal Bureau of Investigation (FBI) and the U.S. Attorney’s Office for the Distri...
Author: DigitalSpying Security Desk
Date: September 18, 2026
In a significant software supply chain vulnerability affecting the modern AI-assisted engineering ecosystem, cybersecurity researchers from Air Security have revealed Plugin4Shell, an architectur...
Author: DigitalSpying Security Desk
Date: September 18, 2026
In a sophisticated malware distribution campaign combining developer-platform SEO poisoning with high-level kernel evasion, threat actors have been observed distributing a newly uncovered informa...