Your global source for cybersecurity news, threat intelligence, and expert security analysis.
RedSide Security October 24, 2026 Cyber Attacks 33 views
Multiple waves of DDoS attacks took North Korea's public websites offline this week, with traffic traced to Vietnam, the Philippines, Venezuela, and elsewhere. The incident highlights how limited-capacity networks remain acutely vulnerable to availability attacks.
Continue reading: Multiple Waves of DDoS Attacks Knock North Korea's…
RedSide Security October 24, 2026 Data Leaks & Breaches 43 views
Capcom has confirmed that unauthorized access to its CAPCOM ID service exposed 11,77,4,247 customer records worldwide, including email addresses and account-activity details, with forced password resets on 196 accounts.
RedSide Security October 24, 2026 Vulnerability 49 views
HPE has patched multiple vulnerabilities in Aruba Networking AOS-8 and AOS-10 software, some exploitable without authentication, that could let attackers take full control of controllers, gateways, and access points.
Continue reading: HPE Patches Critical Aruba Networking Flaws That A…
RedSide Security October 24, 2026 Vulnerability 41 views
Okta patched a critical input-validation flaw, CVE-2026-115547 (CVSS 9.1), in Access Gateway that lets an authenticated administrator execute system commands. Versions before 2026.10.2 are affected.
RedSide Security October 24, 2026 Compliance & Regulations 26 views
New Indian rules expected to take effect in January 2027 may require messaging platforms to verify an active registered SIM, potentially cutting off WhatsApp accounts on tablets, secondary phones, and devices without a live number.
Continue reading: India's SIM-Linked Messaging Rules Could Cut Off W…
RedSide Security October 23, 2026 AI Security 64 views
A missing spending limit in the default x402 SDK client let malicious APIs request signatures for an AI agent's entire token balance until August 18 releases added a cap.
Continue reading: Critical x402 SDK Flaw Let Malicious APIs Drain AI…
RedSide Security October 23, 2026 Vulnerability 35 views
A critical Pillow vulnerability (CVE-2026-112900) lets attackers achieve command execution by passing a crafted filename to Ghostscript when processing EPS images, putting countless Python applications at risk.
Continue reading: Critical Pillow Flaw Lets a Crafted EPS Image Run …
RedSide Security October 23, 2026 Cyber Attacks 39 views
ESET reports that Sandworm and UAC-0099 combined forces in a destructive attack on a Ukrainian logistics firm, using spear-phishing for access and a new mesh network backdoor ahead of a wiper deployment.
Continue reading: Sandworm and UAC-0099 Deployed New Mesh Network Ba…
RedSide Security October 23, 2026 Cyber Attacks 52 views
Researchers analyzing exposed criminal infrastructure found that INC and The Gentlemen ransomware affiliates built an AI-agent framework called Phantom to automate intrusion and extortion workflows.
Continue reading: Leaked Servers Expose How Ransomware Affiliates We…
RedSide Security October 23, 2026 Cyber Attacks 38 views
A new UEFI bootkit called BlackX has been used against Central Asian diplomatic targets and can bypass Secure Boot on fully patched Windows systems that lack firmware revocations, Kaspersky reports.
Continue reading: BlackX UEFI Bootkit Quietly Defeats Secure Boot on…
