Your global source for cybersecurity news, threat intelligence, and expert security analysis.
RedSide Security October 14, 2026 Vulnerability 69 views
CISA has issued an urgent warning to patch Ivanti Connect Secure appliances following the active exploitation of CVE-2026-104935, an authentication bypass with a CVSS score of 8.6. Honeypots have already recorded 105 exploit attempts.
Continue reading: CISA Urges Immediate Patching of Ivanti Connect Se…
RedSide Security October 14, 2026 Cyber Attacks 99 views
A new Android banking trojan called Hirudo replaces legitimate banking apps with patched versions that disable their built-in security checks, targeting eight Indonesian banks.
Continue reading: Hirudo Android Trojan Hijacks Banking Apps from th…
RedSide Security October 14, 2026 Vulnerability 52 views
Docker has patched a critical vulnerability in Docker Hub that allowed one user to push, pull, or delete images as another user. The flaw existed for nearly two years and was fixed on September 30.
Continue reading: Docker Patches Critical Hub Flaw That Let Users Im…
RedSide Security October 14, 2026 Vulnerability 56 views
Microsoft's October 2026 Patch Tuesday fixes a record 1,413 vulnerabilities, including an actively exploited Windows Shell bug. Security teams should prioritize patching the exploited flaw and privilege escalation issues.
RedSide Security October 14, 2026 Vulnerability 81 views
Researchers chained a four-byte write with a timing bug to execute code inside a Windows VBS enclave that guards SmartScreen anti-phishing credentials, undermining assumptions about hardware-backed isolation.
RedSide Security October 14, 2026 Cybersecurity 60 views
An OpenAI employee has been charged with allegedly planting a hidden recording device in an executive conference room in San Francisco, spotlighting the persistent risk of insider threats at AI companies.
RedSide Security October 14, 2026 Vulnerability 160 views
An attacker chained three zero-day flaws in Ivanti Connect Secure to gain root access without authentication. Ivanti has patched two, but a third fix is still pending, leaving organizations exposed.
Continue reading: Ivanti Connect Secure Hit by Three-Zero-Day Chain,…
RedSide Security October 13, 2026 AI Security 152 views
Anthropic warns that small AI models could soon self-replicate across IoT devices, forming decentralized worm botnets that are hard to shut down because they lack a central point of control.
Continue reading: Anthropic Warns Small AI Models Could Soon Form Se…
RedSide Security October 13, 2026 Compliance & Regulations 69 views
Norway's Datatilsynet has fined Microsoft-owned adtech firm Xandr €8.6 million — its largest penalty ever — for relaying Grindr users' data to advertisers in a way that could reveal sexual orientation.
Continue reading: Norway Fines Microsoft's Xandr €8.6M for Relaying …
RedSide Security October 13, 2026 Vulnerability 106 views
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner.
Continue reading: LG Smart TVs Exposed: Pre-Auth Root Takeover via L…
