Cybersecurity News & Blog

New BitUnlocker Downgrade Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes

RedSide Security May 13, 2026 Vulnerability 263 views

Researchers have unveiled BitUnlocker, a new downgrade attack capable of bypassing Microsoft BitLocker encryption on patched Windows 11 systems in under five minutes. The attack abuses a flaw in the Windows Recovery Environment (WinRE) and a trusted legacy Secure Boot certificate to boot vulnerable components, allowing attackers with physical access to decrypt protected drives without triggering security alerts.

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

RedSide Security May 10, 2026 CVE 189 views

A newly disclosed Linux kernel vulnerability chain, dubbed **Dirty Frag**, enables unprivileged local users to gain root access across major Linux distributions. The flaw combines two page-cache write issues in the xfrm-ESP and RxRPC subsystems, creating a deterministic and highly reliable privilege escalation method. Limited in-the-wild exploitation has already been observed, with attackers using it in post-SSH compromise scenarios.

Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads

RedSide Security May 10, 2026 Cybercrime 196 views

Researchers uncovered 28 fraudulent Android apps on the Google Play Store that falsely claimed to provide access to call histories and WhatsApp logs for any phone number. The apps amassed over 7.3 million downloads before removal and tricked victims into paying subscriptions for completely fabricated data.

Ollama Vulnerabilities Expose Process Memory and Enable Persistent Code Execution on Windows

RedSide Security May 10, 2026 Vulnerability 234 views

Researchers have disclosed multiple critical vulnerabilities in Ollama, including the “Bleeding Llama” flaw (CVE-2026-7482), which allows remote attackers to leak sensitive process memory from exposed AI servers. Additional unpatched Windows update vulnerabilities could also enable persistent code execution through malicious updates and Startup folder abuse.

cPanel & WHM Patches Three Vulnerabilities Including RCE and Privilege Escalation Flaws

RedSide Security May 09, 2026 CVE 194 views

Detect Leaked Credentials Faster With Leakwatch by RedSide

RedSide Security May 07, 2026 Tools & Technology 226 views

Leaked credentials remain one of the most common entry points for cyberattacks. Leakwatch by RedSide helps security teams identify exposed accounts, monitor compromised identities, and gain visibility into credential leaks before attackers can weaponize them.

GPT‑5.5 Bio Bug Bounty to Strengthen Advanced AI Capabilities

RedSide Security April 25, 2026 Cybersecurity 214 views

Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access

RedSide Security April 08, 2026 CVE 217 views

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

RedSide Security April 04, 2026 CVE 1790 views

Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

RedSide Security April 01, 2026 Cybersecurity 244 views