Cybersecurity Cybersecurity News

AI-Generated "Vibe-Coded" PowerShell Malware Used for Active Directory Reconnaissance

RedSide Security July 13, 2026 Cybersecurity 38 views

Researchers uncovered an AI-generated PowerShell script used to enumerate Active Directory environments during a real-world intrusion. The "vibe-coded" malware demonstrates how attackers are increasingly using AI to create custom reconnaissance tools that evade traditional signature-based detection while retaining the same underlying attack behaviors.

SOC SIEM Cybersecurity AI Malware ThreatIntelligence RedSideSecurity ActiveDirectory PowerShell VibeCoding ArtificialIntelligence ThreatHunting DetectionEngineering BlueTeam RedTeam IncidentResponse WindowsSecurity Huntress EDR InfoSec

Continue reading: AI-Generated "Vibe-Coded" PowerShell Malware Used …

GuardFall Bypass Lets Attackers Evade AI Coding Agent Safety Checks Using Decades-Old Shell Tricks

RedSide Security June 30, 2026 Cybersecurity 49 views

Researchers have disclosed GuardFall, a shell command bypass technique that defeats safety protections in 10 popular AI coding agents. The flaw allows malicious commands to evade text-based filters and execute with user privileges, potentially exposing credentials, source code, and cloud infrastructure.

Cybersecurity Prompt Injection Linux Security Security Research Open Source Security AI Security Cloud Security Artificial Intelligence AI Agents Coding Agents GuardFall Adversa AI Command Injection Bash Security DevSecOps Secure Coding GitHub CI/CD Security Threat Research Software Supply Chain Security

Continue reading: GuardFall Bypass Lets Attackers Evade AI Coding Ag…

Critical SimpleHelp Flaw Actively Exploited to Deploy TaskWeaver Loader and Djinn Stealer

RedSide Security June 30, 2026 Cybersecurity 35 views

Threat actors are actively exploiting CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp RMM software, to deploy the TaskWeaver loader and Djinn Stealer. The malware targets cloud credentials, developer tools, AI platforms, cryptocurrency wallets, and enterprise infrastructure across Windows, macOS, and Linux systems.

Cybersecurity Linux Security Threat Intelligence Authentication Bypass AI Security SimpleHelp CVE-2026-48558 RMM Security Remote Monitoring and Management TaskWeaver Djinn Stealer Malware Information Stealer CISA KEV OpenID Connect OIDC Azure AD Cloud Security AWS Microsoft Azure Google Cloud DevOps Security OpenAI Anthropic Claude Cryptocurrency Theft Windows Security macOS Security

Continue reading: Critical SimpleHelp Flaw Actively Exploited to Dep…

VECT 2.0 Ransomware Can Damage Files Its Own Decryptor Cannot Reliably Restore

RedSide Security June 05, 2026 Cybersecurity 65 views

Security researchers have uncovered serious design flaws in the VECT 2.0 ransomware family that can leave victim files permanently damaged, even when a ransom is paid and a decryptor is provided. Analysis reveals multiple implementation errors, race conditions, and encryption logic flaws that can result in incomplete recovery and irreversible data loss.

cybersecurity infosec vulnerability patching alerts exploitation malware ransomware threat-actors news monitoring attack-prevention incident-response endpoint-security-threat-intelligence threat-detection data-breach windows security-operations

Continue reading: VECT 2.0 Ransomware Can Damage Files Its Own Decry…

TeamPCP and BreachForums Launch $1,000 Contest to Drive Open-Source Supply Chain Attacks

RedSide Security May 14, 2026 Cybersecurity 115 views

Cybercrime groups **TeamPCP** and **BreachForums** are reportedly running a coordinated contest offering a $1,000 Monero prize for supply chain attacks targeting open-source ecosystems. The competition incentivizes participants to compromise software packages and CI/CD pipelines using a malicious tool called “Shai-Hulud,” raising serious concerns about large-scale, crowdsourced software supply chain compromise.

cybersecurity vulnerability exploitation reconnaissance leakwatch malware ransomware zero-day supply-chain-attack open-source exploit threat-actors dark-web breachforums CI-CD github-actions npm pypi docker credential-theft osint apt news fraud monitoring attack-prevention incident-response

Continue reading: TeamPCP and BreachForums Launch $1,000 Contest to …