Cybersecurity News & Blog

Your global source for cybersecurity news, threat intelligence, and expert security analysis.

This Week's Top

Last 7 days

Latest News

India's CBFC Probes Breach Exposing Unreleased Scripts and 500+ Film Titles

India's CBFC Probes Breach Exposing Unreleased Scripts and 500+ Film Titles

RedSide Security October 26, 2026 Data Leaks & Breaches 1 views

India's Central Board of Film Certification is investigating a breach that reportedly exposed shooting scripts, censor cut orders, and distribution agreements tied to more than 500 film titles via its e-Cinepramaan portal.

Continue reading: India's CBFC Probes Breach Exposing Unreleased Scr…
Microsoft Authenticator Flaw Let Zero-Permission Android Apps Steal Work Account Tokens

Microsoft Authenticator Flaw Let Zero-Permission Android Apps Steal Work Account Tokens

RedSide Security October 26, 2026 Cybersecurity 1 views

A high-severity broker flaw in Microsoft Authenticator for Android, CVE-2026-80097, let malicious apps with no permissions steal work account access tokens. Microsoft has patched the issue.

Continue reading: Microsoft Authenticator Flaw Let Zero-Permission A…
Leaked LiteLLM Master Key Exposed GitHub Tokens and Release Pipeline

Leaked LiteLLM Master Key Exposed GitHub Tokens and Release Pipeline

RedSide Security October 24, 2026 Cyber Attacks 33 views

A master key accidentally committed to a public LiteLLM repository in May 2026 let an attacker harvest GitHub tokens and publish a malicious version of the popular Python package, highlighting secret sprawl and release pipeline risk.

Continue reading: Leaked LiteLLM Master Key Exposed GitHub Tokens an…
Researchers Hijack Abandoned Popcorn Time Updater, Push 2 Million Updates to Kill Botnet Risk

Researchers Hijack Abandoned Popcorn Time Updater, Push 2 Million Updates to Kill Botnet Risk

RedSide Security October 24, 2026 Cybersecurity 35 views

Eye Security pushed over 2 million updates to machines it did not own between November 2025 and March 2026, disabling an abandoned Popcorn Time fork's auto-updater that could have been hijacked to build a botnet.

Continue reading: Researchers Hijack Abandoned Popcorn Time Updater,…
CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation

CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation

RedSide Security October 24, 2026 Vulnerability 6191 views

CISA has added two critical, actively exploited vulnerabilities affecting Collabora Online's CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalog, urging prompt remediation.

Continue reading: CISA Adds Collabora Online and Arista VeloCloud Fl…