zero-day — Cybersecurity News

TeamPCP and BreachForums Launch $1,000 Contest to Drive Open-Source Supply Chain Attacks

RedSide Security May 14, 2026 Cybersecurity 115 views

Cybercrime groups **TeamPCP** and **BreachForums** are reportedly running a coordinated contest offering a $1,000 Monero prize for supply chain attacks targeting open-source ecosystems. The competition incentivizes participants to compromise software packages and CI/CD pipelines using a malicious tool called “Shai-Hulud,” raising serious concerns about large-scale, crowdsourced software supply chain compromise.

New BitUnlocker Downgrade Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes

RedSide Security May 13, 2026 Vulnerability 153 views

Researchers have unveiled BitUnlocker, a new downgrade attack capable of bypassing Microsoft BitLocker encryption on patched Windows 11 systems in under five minutes. The attack abuses a flaw in the Windows Recovery Environment (WinRE) and a trusted legacy Secure Boot certificate to boot vulnerable components, allowing attackers with physical access to decrypt protected drives without triggering security alerts.

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday

RedSide Security March 03, 2026 Cyber Attacks 154 views

Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)

RedSide Security February 17, 2026 CVE 421 views

Chrome 0-Day Vulnerability Actively Exploited by Attackers in the Wild

RedSide Security February 16, 2026 Vulnerability 134 views

Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices

RedSide Security February 13, 2026 Vulnerability 125 views

Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released

RedSide Security January 30, 2026 Vulnerability 130 views

Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation

RedSide Security January 28, 2026 CVE 236 views

China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure

RedSide Security January 16, 2026 Cybercrime 134 views

Microsoft Desktop Window Manager 0-Day Vulnerability Exploited in the wild

RedSide Security January 14, 2026 Vulnerability 137 views