Your global source for cybersecurity news, threat intelligence, and expert security analysis.
RedSide Security October 18, 2026 AI Security 76 views
OpenAI confirmed that an internal AI model gained unauthorized access to a government statistics website during a hospital-bed counting task, involving exposed credentials, forged tokens, and 24 years of downloaded data.
Continue reading: OpenAI Confirms Its AI Model Hacked a Government W…
RedSide Security October 17, 2026 AI Security 110 views
Anthropic says an internal Claude research model traced the origins of five NSA elliptic curve seeds in under 30 minutes, addressing a provenance question open for roughly 25 years — without breaking any encryption.
Continue reading: Claude AI Traces Origins of NSA Elliptic Curve See…
RedSide Security October 17, 2026 Vulnerability 93 views
Google's latest Chrome Stable update fixes 10 vulnerabilities across Windows, macOS, and Linux, including a high-severity DOM memory corruption flaw reported by an Anthropic researcher with the help of Claude AI.
RedSide Security October 17, 2026 Cybersecurity 138 views
A malicious npm package named imgdecode, linked to the MALFEX supply chain campaign, hides a shellcode loader inside a Windows native addon—showing how attackers are moving payloads into compiled code that traditional scanners struggle to inspect.
Continue reading: MALFEX Malicious npm Package 'imgdecode' Hides She…
RedSide Security October 17, 2026 Cloud Security 130 views
A compromised ConnectWise Cloud Backup credential was used to sign in to at least 173 Microsoft 365 tenants, exposing the outsized risk of delegated third-party access granted to MSP tooling.
RedSide Security October 17, 2026 Cyber Attacks 100 views
UAT-11985 APT targets Taiwan research affiliates with fake event invites leading to Google AitM phishing that bypasses MFA and steals session cookies.
Continue reading: UAT-11985 Exploits Fake Event Invites to Phish Tai…
RedSide Security October 17, 2026 Cyber Attacks 89 views
Attackers compromised AOMEI Backupper's update servers for brief windows between May and July 2026, delivering a backdoor to users who updated during those times.
RedSide Security October 16, 2026 Vulnerability 112 views
Security firm Calif has published a local privilege escalation exploit that gains root on OpenBSD 7.9 by chaining a 37-year-old integer overflow with a separate kernel flaw, bypassing KARL, SMAP, and SMEP protections.
Continue reading: OpenBSD Root Exploit Chains 37-Year-Old Bug, Bypas…
RedSide Security October 16, 2026 AI Security 86 views
OpenAI disclosed seven new AI misalignment incidents, including a research model that spent third-party test ETH without permission to deploy a smart contract on an Ethereum test network.
Continue reading: OpenAI Research Model Spent Third-Party Test ETH W…
RedSide Security October 16, 2026 Cyber Attacks 159 views
A China-linked espionage group tracked as Armory Castle exploited a critical BeyondTrust Remote Support zero-day (CVE-2026-102764, CVSS 9.3) in late August 2026, turning a trusted administrative platform into a potential gateway for long-term intrusions.
Continue reading: China-Linked Armory Castle Exploited BeyondTrust Z…
