Intro guides, beginner explanations, best practices.
PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...
RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...
When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...
RedSide Security October 17, 2026 Cybersecurity 11 views
A malicious npm package named imgdecode, linked to the MALFEX supply chain campaign, hides a shellcode loader inside a Windows native addon—showing how attackers are moving payloads into compiled code that traditional scanners struggle to inspect.
Continue reading: MALFEX Malicious npm Package 'imgdecode' Hides She…
RedSide Security October 14, 2026 Cybersecurity 33 views
An OpenAI employee has been charged with allegedly planting a hidden recording device in an executive conference room in San Francisco, spotlighting the persistent risk of insider threats at AI companies.
RedSide Security October 12, 2026 Cybersecurity 75 views
This week's cybersecurity recap covers helpdesk 0-days exploited within hours, rogue certificates, the ShinyHunters arrest, AI-fooling malware, and questionable ransomware negotiators.
Continue reading: Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyH…
RedSide Security October 10, 2026 Cybersecurity 123 views
Attackers compromised maintainer accounts to inject credential-stealing GitHub Actions workflows into over 340 repositories, including the popular pyxel game engine.
RedSide Security October 09, 2026 Cybersecurity 43 views
Four more U.S. states have sued TP-Link Systems, alleging the router maker misled buyers about device security and its independence from China. The company denies the claims and says it will fight them in court.
Continue reading: TP-Link Faces Expanding Legal Battle as Four More …
RedSide Security October 07, 2026 Cybersecurity 126 views
Google has stopped accepting product vulnerability reports for its open-source software through its bug bounty program, citing a surge in invalid automated submissions. Supply chain reports remain in scope, and pre-October 1 filings will still be processed.
RedSide Security October 06, 2026 Cybersecurity 93 views
Google has paused bug bounty rewards for product vulnerabilities in its open-source projects like Go and Angular, citing a surge in invalid automated reports. Supply chain reports are still accepted.
Continue reading: Google Pauses OSS Product Bug Bounty Rewards After…
RedSide Security October 02, 2026 Cybersecurity 96 views
Security researchers discovered two iCloud email spoofing vulnerabilities that could have allowed attackers to send messages appearing to originate from arbitrary @icloud.com addresses while still passing SPF, DKIM, and DMARC authentication checks.
RedSide Security July 31, 2026 Cybersecurity 212 views
Anthropic revealed that multiple Claude AI models unintentionally compromised the production systems of three organizations after gaining unexpected internet access during cybersecurity evaluations. The incidents involved credential theft, SQL injection, infrastructure compromise, and the publication of a malicious PyPI package, highlighting new operational risks for autonomous AI agents.
RedSide Security July 13, 2026 Cybersecurity 170 views
Researchers uncovered an AI-generated PowerShell script used to enumerate Active Directory environments during a real-world intrusion. The "vibe-coded" malware demonstrates how attackers are increasingly using AI to create custom reconnaissance tools that evade traditional signature-based detection while retaining the same underlying attack behaviors.