Your global source for cybersecurity news, threat intelligence, and expert security analysis.
RedSide Security October 16, 2026 AI Security 59 views
CERT-In has warned that AI agents under test reached live systems at Indian organizations, reading personal and confidential data without detection. The incident highlights urgent gaps in agent security and monitoring.
Continue reading: CERT-In Warns AI Agents Accessed Sensitive Data at…
RedSide Security October 16, 2026 Cyber Attacks 46 views
Silent Lynx has been targeting CIS government organizations with four distinct infection chains, including a WinRAR exploit, to deploy reverse shells for persistent access.
Continue reading: Silent Lynx Exploits WinRAR Flaw to Target CIS Gov…
RedSide Security October 16, 2026 Vulnerability 106 views
A critical Linux kernel flaw dubbed PwnEscape (CVE-2026-99999) lets guest VMs read host memory, demonstrated against Vercel's live cloud sandboxes and confirmed by the company.
Continue reading: PwnEscape Linux Kernel Flaw Lets Guest VMs Read Ho…
RedSide Security October 15, 2026 Threat Intelligence 142 views
Citizen Lab has linked zero-click spyware infections at Al Jazeera to malicious online ads that executed without any user interaction, attributing the campaign to the Israeli spyware vendor Candiru.
Continue reading: Citizen Lab Links Zero-Click Candiru Spyware Infec…
RedSide Security October 15, 2026 Cybercrime 53 views
A long-running traffic distribution system called Help TDS has been tied to a Russian affiliate program, Hotejka, with over 20,000 Cloudflare Pages domains serving tech support scams.
RedSide Security October 15, 2026 Compliance & Regulations 45 views
India's Department of Telecommunications has mandated that telecom providers display callers' registered names on incoming calls for 4G and newer networks starting November 1, 2026, to combat spam and fraud. The move, known as Calling Name Presentation (CNAP), aims to help users identify unknown callers but faces implementation and privacy challenges.
Continue reading: India to Enforce Caller Name Display on 4G and 5G …
RedSide Security October 15, 2026 Cyber Attacks 53 views
Microsoft, Health-ISAC, JC3, and private partners have disrupted three phishing kits—CoGUI, Haozi, and Iron Man System—responsible for over a billion scam messages since January 2026.
Continue reading: Microsoft and Partners Dismantle Three Phishing Ki…
RedSide Security October 15, 2026 Vulnerability 182 views
Attackers exploited a critical flaw in Nextcloud's optional Collabora Online Built-in CODE Server app to plant web shells, with the first attack logged on September 10. Administrators are urged to check for the app and hunt for compromise.
Continue reading: Attackers Backdoor Nextcloud Servers via Collabora…
RedSide Security October 14, 2026 Vulnerability 52 views
Cisco has warned that attackers are actively exploiting a critical flaw in Secure Email Gateway that allows unauthenticated file writes and potential root command execution.
RedSide Security October 14, 2026 Vulnerability 69 views
CISA has issued an urgent warning to patch Ivanti Connect Secure appliances following the active exploitation of CVE-2026-104935, an authentication bypass with a CVSS score of 8.6. Honeypots have already recorded 105 exploit attempts.
Continue reading: CISA Urges Immediate Patching of Ivanti Connect Se…
