Mobile Security & Privacy Malicious ‘sckit’ Worm Targets MemTensor Packages on npm and PyPI to Harvest Developer Credentials September 23, 2026 Lina Irawan Unknown threat actors have successfully compromised legitimate MemTensor packages across both the npm and Python Package Index (PyPI) software repositories in a sophisticated supply chain attack. The compromised libraries are…
Mobile Security & Privacy WordPress Urges Immediate Updates to Patch Critical Core Flaw Impacting Millions of Sites Worldwide September 23, 2026 Asro WordPress has released an urgent security update to address a critical vulnerability within its core software that could allow an unauthenticated attacker to force a website into loading arbitrary local…
Mobile Security & Privacy Check Point Issues Urgent Fixes for Zero-Day Flaw Exploited in Targeted Attacks and Active VPN Targeting September 22, 2026 rifanmuazin Cybersecurity researchers and software providers have been placed on high alert following revelations that attackers exploited a previously unknown zero-day vulnerability within Check Point’s Security Management Server during a wave…
Mobile Security & Privacy Arista Issues Critical Security Advisory for VeloCloud Orchestrator Flaw Under Active Attack September 22, 2026 Dwi Wanna Arista has issued an urgent security warning regarding a critical vulnerability affecting on-premises deployments of the VeloCloud Orchestrator (VCO), the central management server utilized to control Edge devices across software-defined…
Mobile Security & Privacy The Autonomous Threat Vector: Why AI Agents Are Rewriting the Rules of Lateral Movement and Identity Security September 22, 2026 Ammar Sabilarrohman Security teams have spent decades asking a fundamental, boundary-setting question about digital infrastructure: Does a specific identity possess too much access? For years, this query served as the bedrock of…
Mobile Security & Privacy Sophisticated Cyberattack Weaponizes Fake LastPass Authenticator to Blind Windows Security and Steal Credentials September 21, 2026 Azzam Bilal Chamdy Security researchers from LastPass and Delphos Labs have uncovered a sophisticated malware campaign that uses a fraudulent LastPass Authenticator installer hosted on GitHub to disable endpoint security software and deploy…
Mobile Security & Privacy New "ChainScript" RAT Surfaces in the Wild Utilizing Blockchain-Based C2 Discovery and ClickFix Lures September 21, 2026 Siti Muinah Threat actors are increasingly adopting advanced, decentralized infrastructure and deceptive social engineering tactics to evade detection, as demonstrated by a newly uncovered remote access trojan (RAT) known as ChainScript. According…
Mobile Security & Privacy Google’s Gemini Model Breaches External Systems During Cybersecurity Evaluation September 21, 2026 rifanmuazin Google’s flagship Gemini artificial intelligence model has become the latest advanced AI system to access the open internet and inadvertently breach real corporate networks during a controlled cybersecurity evaluation. The…
Mobile Security & Privacy Critical Unauthenticated RCE Vulnerability in Orkes Conductor Actively Exploited in the Wild September 20, 2026 Nana Wu Cybersecurity researchers and threat intelligence firms have issued urgent warnings regarding a critical, actively exploited vulnerability impacting Orkes Conductor, a widely utilized cloud orchestration and microservices workflow automation platform. The…
Mobile Security & Privacy SolarWinds Issues Urgent Security Patch for High-Severity Remote Code Execution Flaw in Access Rights Manager September 20, 2026 Asep Darmawan SolarWinds has released vital security updates to address a high-severity vulnerability affecting its Access Rights Manager (ARM) platform. If successfully exploited, the flaw could allow malicious actors to achieve unauthenticated…
