Cybersecurity News & Blog

Your global source for cybersecurity news, threat intelligence, and expert security analysis.

This Week's Top

Last 7 days
CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation 6,247
Vulnerability

CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation
  1. Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data 359 · Oct 23
  2. PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution 236 · Oct 21
  3. Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for th… 216 · Oct 21
  4. GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases 134 · Oct 21

Latest News

Autonomous AI Agents Breach Over 1,200 Company Websites in Hands-Off Attack Campaign

Autonomous AI Agents Breach Over 1,200 Company Websites in Hands-Off Attack Campaign

RedSide Security October 20, 2026 AI Security 58 views

A Chinese-speaking criminal group used autonomous AI agents to attempt intrusions against more than 1,200 websites, reaching over 100 companies — and a researcher watched the campaign unfold through the operators' exposed control panels.

threat actors AI agents autonomous attacks web application security exposed interfaces vulnerability exploitation operational security
Continue reading: Autonomous AI Agents Breach Over 1,200 Company Web…
ClickFix Campaign Weaponizes Siemens Software Center DLL Flaw to Drop RATs

ClickFix Campaign Weaponizes Siemens Software Center DLL Flaw to Drop RATs

RedSide Security October 20, 2026 Vulnerability 49 views

Siemens patched a high-severity DLL sideloading flaw in Software Center (CVE-2026-110936) that attackers chained with ClickFix lures to deploy a remote access trojan on enterprise and OT-adjacent endpoints.

Patch Management Social Engineering ClickFix Siemens DLL Sideloading CVE-2026-110936 Remote Access Trojan
Continue reading: ClickFix Campaign Weaponizes Siemens Software Cent…
Critical Drupal Core Flaw Allows Unauthenticated Remote Code Execution

Critical Drupal Core Flaw Allows Unauthenticated Remote Code Execution

RedSide Security October 20, 2026 Vulnerability 118 views

Drupal has patched a critical, unauthenticated remote code execution flaw in Drupal core's Field UI module tracked as CVE-2026-108097, warning that attackers could take over affected sites without logging in.

Patch Management Remote Code Execution Web Security Drupal CVE-2026-108097 CMS Security Vulnerability Disclosure
Continue reading: Critical Drupal Core Flaw Allows Unauthenticated R…
GhostAction Attackers Hide Credential Stealer Inside a Fake Font Across 94 GitHub Repositories

GhostAction Attackers Hide Credential Stealer Inside a Fake Font Across 94 GitHub Repositories

RedSide Security October 19, 2026 Cyber Attacks 119 views

The GhostAction threat actor has moved beyond malicious GitHub Actions workflows, phishing developers and hiding a credential stealer in a fake font file found across 94 repositories.

malware phishing GitHub supply chain attack GhostAction credential stealer open source security
Continue reading: GhostAction Attackers Hide Credential Stealer Insi…
Unpatched Broadcom Wi-Fi Flaw Lets Nearby Attackers Run Root Code on Routers

Unpatched Broadcom Wi-Fi Flaw Lets Nearby Attackers Run Root Code on Routers

RedSide Security October 19, 2026 Vulnerability 114 views

An unpatched Broadcom Wi-Fi setup flaw lets attackers within radio range run code as root on affected routers without a password or pairing step, as demonstrated against three Belgian ISP gateways.

Broadcom Wi-Fi Router Security Root Code Execution Firmware ISP Gateways Unpatched Vulnerability
Continue reading: Unpatched Broadcom Wi-Fi Flaw Lets Nearby Attacker…
OpenCode Discloses Breach Exposing Third-Party API Keys for 1.4% of Console Users

OpenCode Discloses Breach Exposing Third-Party API Keys for 1.4% of Console Users

RedSide Security October 18, 2026 Data Leaks & Breaches 173 views

OpenCode has disclosed a breach affecting 1.4% of its Console users, warning that third-party API keys stored in affected workspaces may have been exposed and linking the incident to a large-scale distillation attack.

data breach third-party risk AI security OpenCode API key exposure distillation attack credential rotation
Continue reading: OpenCode Discloses Breach Exposing Third-Party API…