Your global source for cybersecurity news, threat intelligence, and expert security analysis.
RedSide Security October 06, 2026 Vulnerability 44 views
Researchers have shown that malicious spreadsheets can execute code in LibreOffice and Apache OpenOffice without the usual macro warning, but only when Java support is enabled. The technique is currently a proof of concept with no known attacks in the wild.
Continue reading: LibreOffice and OpenOffice Flaws Let Malicious Spr…
RedSide Security October 06, 2026 Cybercrime 100 views
Blockchain investigator ZachXBT says he infiltrated a Chinese cryptocurrency laundering network allegedly linked to North Korea's Lazarus Group and traced more than $1 billion in stolen assets following the $1.5 billion Bybit hack, helping identify wallet clusters and freeze cryptocurrency connected to the operation.
RedSide Security October 06, 2026 CVE 171 views
Atlassian has disclosed critical vulnerability CVE-2026-21589 affecting eight self-hosted Data Center products, allowing unauthenticated attackers to read specific files from application root directories. Rated CVSS 9.3, the flaw affects Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye, with Atlassian urging customers to patch immediately.
RedSide Security October 02, 2026 Cybersecurity 134 views
Security researchers discovered two iCloud email spoofing vulnerabilities that could have allowed attackers to send messages appearing to originate from arbitrary @icloud.com addresses while still passing SPF, DKIM, and DMARC authentication checks.
RedSide Security September 17, 2026 Vulnerability 126 views
ShieldBreak (CVE-2026-69414) is a Microsoft Defender elevation-of-privilege vulnerability linked to research on bypassing mitigations for RoguePlanet (CVE-2026-50656). Explore the technical research, affected components, and defensive detection opportunities.
RedSide Security August 28, 2026 Data Leaks & Breaches 184 views
Hackers have reportedly stolen personal data belonging to approximately 8.7 million customers following a cyberattack targeting systems used by Manchester Airports Group, which operates Manchester, East Midlands, and London Stansted airports. The incident exposed email addresses, postcodes, vehicle registration details, and other travel-related information.
RedSide Security August 17, 2026 Vulnerability 242 views
Security researchers have disclosed an attack chain affecting Microsoft System Center Configuration Manager (SCCM) that could allow standard Active Directory users to ultimately execute malicious code with SYSTEM privileges on an SCCM primary site server. The chain combines an AdminService authorization flaw, weak signature validation, CAB path traversal, and unsafe DLL loading.
RedSide Security August 16, 2026 Data Leaks & Breaches 465 views
A threat actor known as TheHatman is allegedly selling employee directories stolen from major enterprises through compromised Azure and Microsoft Entra credentials. The campaign reportedly exposes millions of records, including corporate emails, employee details, reporting structures, service accounts, and administrator information, creating significant risks for spear-phishing, privilege escalation, and further network compromise.
RedSide Security August 12, 2026 CVE 200 views
Adobe has released urgent security updates for ColdFusion 2025 and 2023, fixing multiple critical vulnerabilities including a CVSS 10.0 unauthenticated OS command injection flaw that could enable remote code execution and full server compromise. Organizations should patch exposed ColdFusion deployments immediately.
RedSide Security August 12, 2026 AI Security 250 views
A new study shows that encrypted AI reasoning traces from OpenAI, Anthropic, and Google could be replayed and decoded to expose hidden reasoning, API keys, passwords, and other sensitive data. Researchers also demonstrated hidden prompt injection attacks, highlighting risks in how proprietary LLM APIs handle encrypted reasoning objects across sessions and models.
