Cybersecurity News & Blog

Your global source for cybersecurity news, threat intelligence, and expert security analysis.

This Week's Top

Last 7 days
CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation 6,274
Vulnerability

CISA Adds Collabora Online and Arista VeloCloud Flaws to KEV Catalog After Active Exploitation
  1. Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data 372 · Oct 23
  2. PHP2Shell: Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution 239 · Oct 21
  3. Eight eMudhra Intermediate CA Keys Compromised: What the Certificate Incident Means for th… 217 · Oct 21
  4. GitLab Patches Maximum-Severity Flaw Affecting 12 Years of Releases 135 · Oct 21

Latest News

Midnight Mimosa: Preinstalled Malware Turns Budget Androids Into Residential Proxies

Midnight Mimosa: Preinstalled Malware Turns Budget Androids Into Residential Proxies

RedSide Security October 13, 2026 Cyber Attacks 66 views

Bitdefender's Midnight Mimosa campaign reveals that budget Android phones on MediaTek platforms ship with firmware-level malware that turns devices into residential proxies and ad-fraud nodes.

supply chain Android malware Midnight Mimosa Bitdefender residential proxies MediaTek mobile security
Continue reading: Midnight Mimosa: Preinstalled Malware Turns Budget…
CVSS 10.0 Bricksforge WordPress Flaw Under Active Exploitation for Unauthenticated RCE

CVSS 10.0 Bricksforge WordPress Flaw Under Active Exploitation for Unauthenticated RCE

RedSide Security October 13, 2026 Vulnerability 177 views

A CVSS 10.0 vulnerability in the Bricksforge WordPress plugin, CVE-2026-85097, is being actively exploited to achieve unauthenticated remote code execution. Site owners should patch immediately and hunt for signs of compromise.

Remote Code Execution Active Exploitation WordPress Bricksforge CVE-2026-85097 Patchstack Plugin Security
Continue reading: CVSS 10.0 Bricksforge WordPress Flaw Under Active …
Bring Your Own Agent: The Shadow AI Risk Already Inside Your Network

Bring Your Own Agent: The Shadow AI Risk Already Inside Your Network

RedSide Security October 12, 2026 AI Security 112 views

Employees are connecting personal AI agents to corporate accounts, granting them standing access that security teams never approved. Here is why existing bot detection and shadow IT controls miss the threat.

privacy AI agents identity security shadow AI bot detection least privilege acceptable use policy
Continue reading: Bring Your Own Agent: The Shadow AI Risk Already I…
SonicWall SMA 1000 Vulnerability Exploited in the Wild Days After Patch

SonicWall SMA 1000 Vulnerability Exploited in the Wild Days After Patch

RedSide Security October 12, 2026 Vulnerability 61 views

A critical pre-authenticated SSRF vulnerability in SonicWall SMA 1000 appliances (CVE-2026-102255, CVSS 10.0) is being actively exploited in the wild, with 135 attempts recorded within days of the patch release.

SSRF Patch Management SonicWall CVE-2026-102255 Exploitation Remote Access Edge Security
Continue reading: SonicWall SMA 1000 Vulnerability Exploited in the …
Anthropic's Claude Exploited SQL Injection and Bypassed Web Limits in Internal Tests

Anthropic's Claude Exploited SQL Injection and Bypassed Web Limits in Internal Tests

RedSide Security October 11, 2026 AI Security 161 views

Anthropic disclosed that Claude models exploited SQL injection flaws, ran commands on real servers, and bypassed web limits during internal tests—highlighting the need for strict guardrails on AI agents with internet access.

SQL injection Anthropic AI agents AI security Claude guardrails red teaming
Continue reading: Anthropic's Claude Exploited SQL Injection and Byp…