Cybersecurity News & Blog

Your global source for cybersecurity news, threat intelligence, and expert security analysis.

This Week's Top

Last 7 days
CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation 6,247
Vulnerability

CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation
  1. Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data 359 · Oct 23
  2. PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution 236 · Oct 21
  3. Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for th… 216 · Oct 21
  4. GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases 134 · Oct 21

Latest News

LiteLLM Compromised: Supply Chain Attack Plants Credential Stealer and Backdoor in Popular AI Library

LiteLLM Compromised: Supply Chain Attack Plants Credential Stealer and Backdoor in Popular AI Library

RedSide Security October 22, 2026 Cybersecurity 124 views

LiteLLM 1.107.0 was compromised in a supply chain attack that delivered a credential stealer and backdoor via PyPI wheels and Docker images. PyPI has quarantined the package, but already-installed environments remain at risk.

backdoor supply chain attack credential stealer open source security LiteLLM PyPI AI tooling
Continue reading: LiteLLM Compromised: Supply Chain Attack Plants Cr…
GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases

GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases

RedSide Security October 21, 2026 Vulnerability 134 views

GitLab has released emergency fixes for a CVSS 10.0 unauthenticated remote code execution flaw present in every self-managed release since version 7.0, and administrators who patched on October 12 may still be exposed.

patching supply chain remote code execution GitLab CVSS 10.0 self-managed devsecops
Continue reading: GitLab Patches Maximum-Severity Flaw Affecting 12 …
PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution

PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution

RedSide Security October 21, 2026 CVE 236 views

PHP has released emergency security updates for two critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2. The flaws affect PHP memory management and could allow unauthenticated remote code execution on vulnerable web servers. Administrators are urged to upgrade to patched PHP versions immediately.

Cybersecurity Exploit RCE Vulnerability Management Threat Intelligence Memory Corruption Remote Code Execution Web Server Security Zero-Day Critical Vulnerability Web Application Security Server Security PHP PHP2Shell CVE-2026-109618 CVE-2026-109619 CVSS 9.2 PHP Security Apache mod_php PHP-FPM Use-After-Free Out-of-Memory Security Patches Security Advisory
Continue reading: PHP2Shell: Two Critical PHP Vulnerabilities Allow …
State Bank of India Confirms Data Leak After 3,897 Customer Records Surface on Dark Web

State Bank of India Confirms Data Leak After 3,897 Customer Records Surface on Dark Web

RedSide Security October 21, 2026 Data Leaks & Breaches 39 views

State Bank of India has confirmed a data leak after 3,897 of its customer records were found within a 375,000-record cache circulating on the dark web, but the bank says it does not yet know the data's origin.

data breach dark web banking security financial sector India State Bank of India data leak
Continue reading: State Bank of India Confirms Data Leak After 3,897…
Qilin and INC Ransomware Exploit Palo Alto Networks Authentication Bypass (CVE-2026-0257)

Qilin and INC Ransomware Exploit Palo Alto Networks Authentication Bypass (CVE-2026-0257)

RedSide Security October 21, 2026 Vulnerability 94 views

Palo Alto Networks continues to see Qilin and INC ransomware operators exploiting CVE-2026-0257, a patched PAN-OS and Prisma Access authentication bypass that lets attackers create unauthorized VPN connections and sidestep MFA.

Authentication Bypass Ransomware Palo Alto Networks PAN-OS CVE-2026-0257 Qilin INC Ransomware
Continue reading: Qilin and INC Ransomware Exploit Palo Alto Network…
Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for the Web

Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for the Web

RedSide Security October 21, 2026 Cybersecurity 216 views

Mozilla and Chrome's Root Program confirmed that private keys for eight eMudhra intermediate CA certificates were compromised, forcing emergency distrust and reissuance across the certificate ecosystem.

certificate authority TLS PKI eMudhra key compromise browser trust Certificate Transparency
Continue reading: Eight eMudhra Intermediate CA Keys Compromised: Wh…