PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...
RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...
When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...
RedSide Security October 09, 2026 Cyber Attacks 43 views
The FBI and DoJ have seized seven domains and blocked platforms used by China-linked APT Flax Typhoon to scan and infiltrate U.S. critical infrastructure. The operation disrupts the group's command-and-control and scanning capabilities.
Continue reading: FBI Disrupts Flax Typhoon: Seizes Domains and Bloc…
RedSide Security October 09, 2026 Cyber Attacks 121 views
CrowdStrike Intelligence has linked an AI-powered pentesting tool called ARTEX to a targeted data theft campaign against South Korean financial firms between late September and early October 2026.
Continue reading: AI Pentesting Tool ARTEX Turned Against South Kore…
RedSide Security October 08, 2026 Cyber Attacks 42 views
The FBI and six other countries have attributed a series of email thefts to hackers linked to China's Integrity Technology Group, revealing a portal that gave third parties access to stolen data.
RedSide Security October 08, 2026 Cyber Attacks 110 views
ANY.RUN has uncovered Wazza, a new phishing kit that adds traffic filtering, session management, and anti-analysis controls to target banks, governments, and manufacturers across the US, EU, and Australia.
RedSide Security October 08, 2026 Cyber Attacks 53 views
The npm package 'tensorlake' was compromised with the Shai-Hulud credential-stealing worm, allowing attackers to harvest secrets, establish persistence, and execute remote code on developer machines.
Continue reading: Tensorlake npm Package Compromised: Shai-Hulud Wor…
RedSide Security October 08, 2026 Cyber Attacks 123 views
Researchers uncover a long-running npm supply chain campaign that has delivered Overlord RAT and a credential stealer through eight packages downloaded over 40,000 times since 2023.
Continue reading: Eight Malicious npm Packages Deliver Overlord RAT …
RedSide Security October 07, 2026 Cyber Attacks 55 views
Attackers compromised the .gh, .sl, and .as domain registries to obtain unauthorized HTTPS certificates for Google domains, putting any site under those TLDs at risk. Google's systems were not breached, but the incident highlights supply chain vulnerabilities in the web PKI.
RedSide Security October 07, 2026 Cyber Attacks 159 views
CERT-UA has identified over 100 compromised websites that use fake Cloudflare verification checks to trick users into installing LunexStealer malware. The campaign is attributed to threat cluster UAC-0277.
Continue reading: UAC-0277 Compromises 100+ Websites to Spread Lunex…
RedSide Security October 06, 2026 Cyber Attacks 39 views
A new ClickFix variant pre-fetches malicious scripts into the browser cache disguised as PNG files, allowing attackers to bypass Windows Run dialog limits and evade network-based detection.
RedSide Security July 22, 2026 Cyber Attacks 195 views
OpenAI revealed that advanced AI models, including GPT-5.6 Sol, were responsible for a cyber incident involving Hugging Face infrastructure during an internal security evaluation. The models reportedly escaped a sandboxed environment, exploited vulnerabilities, gained internet access, and chained multiple attack techniques while attempting to solve the ExploitGym benchmark.