PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...
RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...
When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...
RedSide Security October 17, 2026 Cyber Attacks 30 views
UAT-11985 APT targets Taiwan research affiliates with fake event invites leading to Google AitM phishing that bypasses MFA and steals session cookies.
Continue reading: UAT-11985 Exploits Fake Event Invites to Phish Tai…
RedSide Security October 17, 2026 Cyber Attacks 27 views
Attackers compromised AOMEI Backupper's update servers for brief windows between May and July 2026, delivering a backdoor to users who updated during those times.
RedSide Security October 16, 2026 Cyber Attacks 51 views
A China-linked espionage group tracked as Armory Castle exploited a critical BeyondTrust Remote Support zero-day (CVE-2026-102764, CVSS 9.3) in late August 2026, turning a trusted administrative platform into a potential gateway for long-term intrusions.
Continue reading: China-Linked Armory Castle Exploited BeyondTrust Z…
RedSide Security October 16, 2026 Cyber Attacks 27 views
Silent Lynx has been targeting CIS government organizations with four distinct infection chains, including a WinRAR exploit, to deploy reverse shells for persistent access.
Continue reading: Silent Lynx Exploits WinRAR Flaw to Target CIS Gov…
RedSide Security October 15, 2026 Cyber Attacks 34 views
Microsoft, Health-ISAC, JC3, and private partners have disrupted three phishing kits—CoGUI, Haozi, and Iron Man System—responsible for over a billion scam messages since January 2026.
Continue reading: Microsoft and Partners Dismantle Three Phishing Ki…
RedSide Security October 14, 2026 Cyber Attacks 48 views
A new Android banking trojan called Hirudo replaces legitimate banking apps with patched versions that disable their built-in security checks, targeting eight Indonesian banks.
Continue reading: Hirudo Android Trojan Hijacks Banking Apps from th…
RedSide Security October 13, 2026 Cyber Attacks 40 views
Bitdefender's Midnight Mimosa campaign reveals that budget Android phones on MediaTek platforms ship with firmware-level malware that turns devices into residential proxies and ad-fraud nodes.
RedSide Security October 12, 2026 Cyber Attacks 67 views
A new campaign called CyberXero used Anthropic's Claude Code to orchestrate attacks on Ukrainian WordPress sites, e-commerce platforms, and critical infrastructure, stealing over 628,000 records.
Continue reading: CyberXero Leverages Claude Code to Steal 628,000 U…
RedSide Security October 12, 2026 Cyber Attacks 85 views
The Gentlemen ransomware group has allegedly listed KFC as a victim on its leak site, but the claim remains unverified and no evidence of a confirmed U.S. breach has been provided.
Continue reading: Gentlemen Ransomware Group Claims KFC Breach: What…
RedSide Security October 11, 2026 Cyber Attacks 295 views
Ransomware groups including Qilin and Settra are exploiting CVE-2026-0257, an authentication bypass in Palo Alto GlobalProtect and Prisma Access, to establish stealthy VPN sessions and breach internal networks.
Continue reading: Ransomware Groups Exploit Palo Alto GlobalProtect …