Cybersecurity News & Blog

Your global source for cybersecurity news, threat intelligence, and expert security analysis.

This Week's Top

Last 7 days
CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation 6,219
Vulnerability

CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation
  1. Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data 350 · Oct 23
  2. PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution 235 · Oct 21
  3. Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for th… 216 · Oct 21
  4. GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases 134 · Oct 21

Latest News

Attackers Breach Edge Firewalls and VPNs, Harvesting 70,000+ Credentials

Attackers Breach Edge Firewalls and VPNs, Harvesting 70,000+ Credentials

RedSide Security October 23, 2026 Cyber Attacks 53 views

A large-scale campaign targeting Fortinet FortiGate and Palo Alto GlobalProtect edge devices has yielded over 70,000 credentials, with evidence attackers gained access to numerous organizations worldwide.

Palo Alto Networks credential theft Fortinet VPN security network edge devices firewall compromise enterprise security
Continue reading: Attackers Breach Edge Firewalls and VPNs, Harvesti…
PHP Flags New Unpatched RCE Just Two Days After Emergency PHP2Shell Fixes

PHP Flags New Unpatched RCE Just Two Days After Emergency PHP2Shell Fixes

RedSide Security October 23, 2026 Vulnerability 51 views

PHP has disclosed a new unpatched RCE, CVE-2026-115560, just two days after emergency PHP2Shell fixes — but says it only affects unusual configurations and is recommending a feature be disabled rather than issuing another emergency patch.

RCE Patch Management Web Security Vulnerability Disclosure PHP PHP2Shell CVE-2026-115560
Continue reading: PHP Flags New Unpatched RCE Just Two Days After Em…
Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data

Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data

RedSide Security October 23, 2026 Vulnerability 350 views

Imperva researchers demonstrated Node2Shell, a proof-of-concept RCE that exploits the Brotli decoder bundled in official Node.js builds (CVE-2026-111497) to run attacker code on a stock Node.js 24.22.0 Linux arm64 image.

RCE Vulnerability Disclosure Node.js Brotli CVE-2026-111497 Imperva Runtime Security
Continue reading: Node2Shell: Researchers Achieve RCE on Stock Node.…
INTERPOL's Operation Serengeti III: 1,462 Arrests and 10,909 Networks Disrupted

INTERPOL's Operation Serengeti III: 1,462 Arrests and 10,909 Networks Disrupted

RedSide Security October 22, 2026 Cybercrime 56 views

INTERPOL's Operation Serengeti III, run across 21 countries from late June to August 2026, led to 1,462 arrests, the disruption of 10,909 malicious networks, and the recovery of over $105 million in illicit funds.

fraud cybercrime law enforcement INTERPOL Operation Serengeti international cooperation takedown
Continue reading: INTERPOL's Operation Serengeti III: 1,462 Arrests …
Railway Warns That Intruder May Have Read Customer Environment Variables, Urges Credential Rotation

Railway Warns That Intruder May Have Read Customer Environment Variables, Urges Credential Rotation

RedSide Security October 22, 2026 Data Leaks & Breaches 44 views

Railway disclosed that an unauthorized third party may have accessed customer environment variables and, in some cases, decrypted their contents, urging affected users to rotate credentials.

data breach cloud security credential rotation Railway secrets management PaaS incident disclosure
Continue reading: Railway Warns That Intruder May Have Read Customer…
Bronze Sandcastle: China-Aligned Group Weaponizes Sandboxie DLL Sideloading for Backdoor Deployment

Bronze Sandcastle: China-Aligned Group Weaponizes Sandboxie DLL Sideloading for Backdoor Deployment

RedSide Security October 22, 2026 Threat Intelligence 41 views

A newly documented China-aligned cluster, Bronze Sandcastle, has targeted organizations in Asia and Africa since mid-2025, using Sandboxie DLL sideloading as its signature technique to deploy backdoors.

Backdoor DLL Sideloading Bronze Sandcastle Sandboxie China-Nexus Threats Sophos Threat Actor
Continue reading: Bronze Sandcastle: China-Aligned Group Weaponizes …