security-operations — Cybersecurity News

New Open-Source Tool: TeleSink - Turning Malware C2 Against Itself

RedSide Security June 10, 2026 Tools & Technology 127 views

TeleSink is an open-source malware analysis tool that redirects Telegram bot traffic into a controlled local environment, enabling real-time extraction of bot tokens, chat IDs, and exfiltrated data without manual deobfuscation.

VECT 2.0 Ransomware Can Damage Files Its Own Decryptor Cannot Reliably Restore

RedSide Security June 05, 2026 Cybersecurity 65 views

Security researchers have uncovered serious design flaws in the VECT 2.0 ransomware family that can leave victim files permanently damaged, even when a ransom is paid and a decryptor is provided. Analysis reveals multiple implementation errors, race conditions, and encryption logic flaws that can result in incomplete recovery and irreversible data loss.

PCAPGraph: Threat Hunting at the Speed of Triage

RedSide Security June 04, 2026 Tools & Technology 71 views

PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet captures into interactive graphs. Designed for rapid incident response, it helps analysts quickly identify malicious communications, visualize host relationships, investigate indicators of compromise (IoCs), and uncover suspicious activity without spending hours manually reviewing packets.

Open-Source Network Discovery & Topology Mapping

RedSide Security June 03, 2026 Tools & Technology 108 views

RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to help security teams see their infrastructure the way an attacker would. Inspired by BloodHound’s graph-based approach, netmapper maps live network devices, services, and relationships, transforming raw discovery data into an interactive topology map.

RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

RedSide Security June 03, 2026 Tools & Technology 86 views

When an incident unfolds and all you have left are Windows event logs, understanding attacker movement becomes a slow and painful process. RDPGraph transforms raw `.evtx` files into an interactive BloodHound-style graph, allowing responders to quickly visualize RDP activity, identify lateral movement, and investigate compromised systems in minutes instead of hours.

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

RedSide Security May 27, 2026 CVE 119 views