Kenji Tanaka is a RECATOOLS editorial persona focused on developer tools, cloud platforms, DevOps, CI/CD, software supply chains, and infrastructure trends. Articles under this byline help technical readers understand how tooling changes affect software delivery, security, cost, and reliability.

About this byline

Kenji Tanaka is a RECATOOLS editorial persona for developer tools, cloud, DevOps, and software supply-chain coverage. Articles are produced and reviewed under RECATOOLS editorial supervision.

Editorial responsibility for this byline rests with Jeffrey Tan (Tan Seng Fei), RECASYS, Singapore. Our Editorial Policy sets out how sources are reviewed, how AI-assisted workflows are used, and how editorial desks and personas are defined.

302
Articles
Developer Tools
Primary beat
May 2026
Writing since
~2181 min
Total reading

Articles · Cybersecurity Showing 1–10 of 84

A padlock drawn over a world map
Cybersecurity

Unit 42 Links Fortinet Path-Traversal Bug to Memory-Only FortiGate Implant in Telecom Intrusion

Attackers stole the configurations of 500+ firewalls from one FortiManager, then planted PEERSTITCH. CISA added CVE-2025-61624 to its exploited list on 16 October.

20 Oct 2026 · 6 min read
A glowing cloud shape suspended inside a glass box
Cybersecurity

Attackers Used ConnectWise Cloud Backup's Own Access to Sign In to Microsoft 365 Tenants

ConnectWise has suspended the former SkyKick backup service. Huntress counted 162 tenants with unauthorised sign-ins. Here is what admins should check.

19 Oct 2026 · 6 min read
A small network switch with several cables plugged in
Cybersecurity

Palo Alto Patches a Firewall Flaw Already Used in Attacks, the Third Exploited PAN-OS Bug This Year

An attacker with admin credentials can run code as root through the management interface. CISA gave US agencies three days to fix it.

16 Oct 2026 · 4 min read
A developer typing on a laptop beside a Python programming book, the language of the affected SAP Cloud SDK
Cybersecurity

SAP Rates a Python SDK Flaw 10 Out of 10. Whether It Hits You Depends on One Field

CVE-2026-89111 lets an attacker steal OAuth2 client credentials from multi-tenant BTP apps that let outsiders set the tenant subdomain. Version 0.45.2 fixes it.

15 Oct 2026 · 4 min read
Stacked shipping containers at a port terminal, the image behind the name of software containers stored on registries like Docker Hub
Cybersecurity

A Docker Hub Flaw Let Anyone Mint a Token for Someone Else's Account for Two Years

Docker fixed CVE-2026-105445 within four hours and found no sign of abuse in 304,000 pushes, but says an unused stolen token would have left no trace.

15 Oct 2026 · 5 min read
Bundles of network cables and connectors, the plumbing behind the VPN gateways that companies expose to the internet
Cybersecurity

Attackers Chained Three Ivanti VPN Flaws to Get Root, and One Is Still Unpatched

Volexity traced break-ins on fully patched Connect Secure gateways back to 3 October. The attackers patched code only in memory, which Ivanti's own integrity checker may not see.

14 Oct 2026 · 5 min read
A laptop screen showing a Windows upgrade in progress
Cybersecurity

Microsoft Patched a Record 1,411 Flaws in October and Suggested a New Way to Sort Them

One Windows Shell bug was already being exploited. On the same day, Microsoft proposed grouping vulnerabilities by shared questions about a customer's own systems.

14 Oct 2026 · 4 min read
A corridor of server racks in a data centre
Cybersecurity

Attackers Probed a Maximum-Severity SonicWall Flaw Three Days After the Fix

CVE-2026-102255 lets anyone with network access make SMA1000 gateways reach their own internal services. There is no workaround; builds 12.4.3-03670 and 12.5.0-03082 fix it.

12 Oct 2026 · 3 min read
Front panel of a rack-mounted network appliance
Cybersecurity

FBI Warns FortiBleed Attackers Are Locking Firewall Owners Out of Their Own Devices

A joint advisory says more than 86,000 FortiGate units are compromised, legitimate admin accounts are being deleted, and stolen access is being sold to ransomware gangs.

8 Oct 2026 · 4 min read
Network equipment in a rack with patch cables connected
Cybersecurity

A Third Citrix NetScaler Flaw Hit Appliances That Had Installed Last Week's Emergency Fix

CVE-2026-88779 affects boxes that use SAML sign-in. Citrix calls it a crash; a researcher found malware running on a patched honeypot. Patch again, then check the logs.

5 Oct 2026 · 5 min read
Editorial Policy →
Advertisement