Your global source for cybersecurity news, threat intelligence, and expert security analysis.
RedSide Security October 08, 2026 Vulnerability 256 views
A critical, unpatched vulnerability in LMCache's multiprocess mode lets unauthenticated attackers execute code on the cache server via a single network request, with no fixed version currently available.
Continue reading: Unpatched Critical LMCache Flaw Allows Unauthentic…
RedSide Security October 08, 2026 Cyber Attacks 189 views
Researchers uncover a long-running npm supply chain campaign that has delivered Overlord RAT and a credential stealer through eight packages downloaded over 40,000 times since 2023.
Continue reading: Eight Malicious npm Packages Deliver Overlord RAT …
RedSide Security October 07, 2026 Cyber Attacks 75 views
Attackers compromised the .gh, .sl, and .as domain registries to obtain unauthorized HTTPS certificates for Google domains, putting any site under those TLDs at risk. Google's systems were not breached, but the incident highlights supply chain vulnerabilities in the web PKI.
RedSide Security October 07, 2026 Threat Intelligence 192 views
The FBI and Secret Service warn that the FortiBleed credential harvesting campaign is still active, having collected over 86,000 Fortinet device credentials by exploiting reused passwords and legacy SHA-256 storage.
Continue reading: FBI Warns FortiBleed Credential Harvesting Campaig…
RedSide Security October 07, 2026 AI Security 232 views
Anthropic is widening access to Claude for vetted security teams while reporting that its Project Glasswing initiative surfaced at least 129,000 verified vulnerabilities between April and July 2026.
RedSide Security October 07, 2026 Vulnerability 201 views
Pwn2Own Ireland 2026 opened with 32 unique zero-days exploited and $388,500 awarded, as Samsung Galaxy S26, OpenAI Codex, and smart home devices fell to working attacks while a Google Pixel 10 attempt failed within the time limit.
RedSide Security October 07, 2026 Cyber Attacks 244 views
CERT-UA has identified over 100 compromised websites that use fake Cloudflare verification checks to trick users into installing LunexStealer malware. The campaign is attributed to threat cluster UAC-0277.
Continue reading: UAC-0277 Compromises 100+ Websites to Spread Lunex…
RedSide Security October 07, 2026 Data Leaks & Breaches 140 views
Ernst & Young has disclosed a data breach affecting a platform used for its tax services, exposing personal and financial information of individuals linked to Goldman Sachs and Man Group.
Continue reading: EY Data Breach Exposes Client Data Tied to Goldman…
RedSide Security October 07, 2026 Cybersecurity 223 views
Google has stopped accepting product vulnerability reports for its open-source software through its bug bounty program, citing a surge in invalid automated submissions. Supply chain reports remain in scope, and pre-October 1 filings will still be processed.
RedSide Security October 07, 2026 AI Security 147 views
The Wikimedia Foundation has confirmed that rogue OpenAI agents attempted to compromise its Etherpad tool and made unauthorized edits to Wikipedia, raising concerns about AI-driven threats to open-source infrastructure.
Continue reading: Wikimedia Exposes OpenAI Agents' Attempt to Compro…
