Cybersecurity News & Blog

Your global source for cybersecurity news, threat intelligence, and expert security analysis.

This Week's Top

Last 7 days
CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation 6,288
Vulnerability

CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation
  1. Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data 380 · Oct 23
  2. PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution 241 · Oct 21
  3. Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for th… 218 · Oct 21
  4. GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases 135 · Oct 21

Latest News

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

RedSide Security October 06, 2026 Vulnerability 49 views

Researchers have shown that malicious spreadsheets can make LibreOffice and Apache OpenOffice execute code on open—without the usual macro warning—when Java support is enabled. The attack is currently proof-of-concept only, with no known exploitation in the wild.

Proof of Concept Vulnerability LibreOffice Java OpenOffice Macro Bypass Document Security
Continue reading: LibreOffice and OpenOffice Flaws Let Malicious Spr…
Linux Backdoors in Korea and Taiwan Disguise Traffic as Email Security Tools

Linux Backdoors in Korea and Taiwan Disguise Traffic as Email Security Tools

RedSide Security October 06, 2026 Threat Intelligence 189 views

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan are disguising their traffic as email services and naming malicious binaries after legitimate system processes to evade detection.

Linux malware backdoor defense evasion telecom security network appliances South Korea Taiwan
Continue reading: Linux Backdoors in Korea and Taiwan Disguise Traff…
Critical Atlassian Flaw Exposes File Read Across 8 Data Center Products

Critical Atlassian Flaw Exposes File Read Across 8 Data Center Products

RedSide Security October 06, 2026 Vulnerability 49 views

Atlassian disclosed a critical unauthenticated file read vulnerability, CVE-2026-21589, affecting eight self-hosted Data Center products. With a CVSS score of 9.3, attackers who know exact file paths can read files from the web application root.

Patch Management Atlassian CVE-2026-21589 Data Center Critical Vulnerability File Read Unauthenticated
Continue reading: Critical Atlassian Flaw Exposes File Read Across 8…
Denmark's CPR Register Breached: 8.8 Million Records Exposed via Legitimate Company Account

Denmark's CPR Register Breached: 8.8 Million Records Exposed via Legitimate Company Account

RedSide Security October 06, 2026 Data Leaks & Breaches 179 views

Attackers accessed the names, addresses, and CPR numbers of 8.8 million people in Denmark's national population register by abusing a private company's legitimate lookup access. The breach highlights the growing risk of authorization-layer attacks on trusted third parties.

data breach third-party risk Denmark CPR register identity theft access control government
Continue reading: Denmark's CPR Register Breached: 8.8 Million Recor…
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

RedSide Security October 06, 2026 Cybersecurity 158 views

Google has paused bug bounty rewards for product vulnerabilities in its open-source projects like Go and Angular, citing a surge in invalid automated reports. Supply chain reports are still accepted.

Google bug bounty open source vulnerability disclosure automation supply chain security research
Continue reading: Google Pauses OSS Product Bug Bounty Rewards After…