Cybersecurity News & Blog

Your global source for cybersecurity news, threat intelligence, and expert security analysis.

This Week's Top

Last 7 days
CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation 6,278
Vulnerability

CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation
  1. Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data 378 · Oct 23
  2. PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution 240 · Oct 21
  3. Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for th… 217 · Oct 21
  4. GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases 135 · Oct 21

Latest News

TP-Link Faces Expanding Legal Battle as Four More States Sue Over Router Security Claims

TP-Link Faces Expanding Legal Battle as Four More States Sue Over Router Security Claims

RedSide Security October 09, 2026 Cybersecurity 65 views

Four more U.S. states have sued TP-Link Systems, alleging the router maker misled buyers about device security and its independence from China. The company denies the claims and says it will fight them in court.

supply chain China TP-Link router security litigation consumer protection network security
Continue reading: TP-Link Faces Expanding Legal Battle as Four More …
FBI Disrupts Flax Typhoon: Seizes Domains and Blocks Tools Used in Critical Infrastructure Attacks

FBI Disrupts Flax Typhoon: Seizes Domains and Blocks Tools Used in Critical Infrastructure Attacks

RedSide Security October 09, 2026 Cyber Attacks 61 views

The FBI and DoJ have seized seven domains and blocked platforms used by China-linked APT Flax Typhoon to scan and infiltrate U.S. critical infrastructure. The operation disrupts the group's command-and-control and scanning capabilities.

APT critical infrastructure FBI Flax Typhoon China domain seizure cyber espionage
Continue reading: FBI Disrupts Flax Typhoon: Seizes Domains and Bloc…
AI Pentesting Tool ARTEX Turned Against South Korean Financial Firms in Targeted Data Theft Campaign

AI Pentesting Tool ARTEX Turned Against South Korean Financial Firms in Targeted Data Theft Campaign

RedSide Security October 09, 2026 Cyber Attacks 208 views

CrowdStrike Intelligence has linked an AI-powered pentesting tool called ARTEX to a targeted data theft campaign against South Korean financial firms between late September and early October 2026.

South Korea ARTEX AI pentesting financial sector CrowdStrike data theft tool abuse
Continue reading: AI Pentesting Tool ARTEX Turned Against South Kore…
FBI Exposes China-Linked Hackers' Portal for Stolen Emails

FBI Exposes China-Linked Hackers' Portal for Stolen Emails

RedSide Security October 08, 2026 Cyber Attacks 65 views

The FBI and six other countries have attributed a series of email thefts to hackers linked to China's Integrity Technology Group, revealing a portal that gave third parties access to stolen data.

China-linked hackers FBI advisory email theft Integrity Technology Group state-sponsored cyber espionage Southeast Asia sanctions
Continue reading: FBI Exposes China-Linked Hackers' Portal for Stole…
Wazza Phishkit: A New Generation of Phishing Infrastructure Targeting Banks, Governments, and Manufacturers

Wazza Phishkit: A New Generation of Phishing Infrastructure Targeting Banks, Governments, and Manufacturers

RedSide Security October 08, 2026 Cyber Attacks 185 views

ANY.RUN has uncovered Wazza, a new phishing kit that adds traffic filtering, session management, and anti-analysis controls to target banks, governments, and manufacturers across the US, EU, and Australia.

phishing ANY.RUN credential theft Wazza phishkit banking security phishing infrastructure session management
Continue reading: Wazza Phishkit: A New Generation of Phishing Infra…
Tensorlake npm Package Compromised: Shai-Hulud Worm Harvests Credentials from Developer Machines

Tensorlake npm Package Compromised: Shai-Hulud Worm Harvests Credentials from Developer Machines

RedSide Security October 08, 2026 Cyber Attacks 74 views

The npm package 'tensorlake' was compromised with the Shai-Hulud credential-stealing worm, allowing attackers to harvest secrets, establish persistence, and execute remote code on developer machines.

malware npm credential theft supply chain attack Shai-Hulud Tensorlake ChainDrop
Continue reading: Tensorlake npm Package Compromised: Shai-Hulud Wor…
Unpatched Critical LMCache Flaw Allows Unauthenticated Remote Code Execution

Unpatched Critical LMCache Flaw Allows Unauthenticated Remote Code Execution

RedSide Security October 08, 2026 Vulnerability 255 views

A critical, unpatched vulnerability in LMCache's multiprocess mode lets unauthenticated attackers execute code on the cache server via a single network request, with no fixed version currently available.

LMCache remote code execution LLM security ZeroMQ unpatched vulnerability vLLM AI infrastructure
Continue reading: Unpatched Critical LMCache Flaw Allows Unauthentic…