PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...
RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...
When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...
RedSide Security October 16, 2026 Vulnerability 21 views
Security firm Calif has published a local privilege escalation exploit that gains root on OpenBSD 7.9 by chaining a 37-year-old integer overflow with a separate kernel flaw, bypassing KARL, SMAP, and SMEP protections.
Continue reading: OpenBSD Root Exploit Chains 37-Year-Old Bug, Bypas…
RedSide Security October 16, 2026 Vulnerability 61 views
A critical Linux kernel flaw dubbed PwnEscape (CVE-2026-99999) lets guest VMs read host memory, demonstrated against Vercel's live cloud sandboxes and confirmed by the company.
Continue reading: PwnEscape Linux Kernel Flaw Lets Guest VMs Read Ho…
RedSide Security October 15, 2026 Vulnerability 55 views
Attackers exploited a critical flaw in Nextcloud's optional Collabora Online Built-in CODE Server app to plant web shells, with the first attack logged on September 10. Administrators are urged to check for the app and hunt for compromise.
Continue reading: Attackers Backdoor Nextcloud Servers via Collabora…
RedSide Security October 14, 2026 Vulnerability 26 views
Cisco has warned that attackers are actively exploiting a critical flaw in Secure Email Gateway that allows unauthenticated file writes and potential root command execution.
RedSide Security October 14, 2026 Vulnerability 40 views
CISA has issued an urgent warning to patch Ivanti Connect Secure appliances following the active exploitation of CVE-2026-104935, an authentication bypass with a CVSS score of 8.6. Honeypots have already recorded 105 exploit attempts.
Continue reading: CISA Urges Immediate Patching of Ivanti Connect Se…
RedSide Security October 14, 2026 Vulnerability 26 views
Docker has patched a critical vulnerability in Docker Hub that allowed one user to push, pull, or delete images as another user. The flaw existed for nearly two years and was fixed on September 30.
Continue reading: Docker Patches Critical Hub Flaw That Let Users Im…
RedSide Security October 14, 2026 Vulnerability 30 views
Microsoft's October 2026 Patch Tuesday fixes a record 1,413 vulnerabilities, including an actively exploited Windows Shell bug. Security teams should prioritize patching the exploited flaw and privilege escalation issues.
RedSide Security October 14, 2026 Vulnerability 31 views
Researchers chained a four-byte write with a timing bug to execute code inside a Windows VBS enclave that guards SmartScreen anti-phishing credentials, undermining assumptions about hardware-backed isolation.
RedSide Security October 14, 2026 Vulnerability 65 views
An attacker chained three zero-day flaws in Ivanti Connect Secure to gain root access without authentication. Ivanti has patched two, but a third fix is still pending, leaving organizations exposed.
Continue reading: Ivanti Connect Secure Hit by Three-Zero-Day Chain,…
RedSide Security October 13, 2026 Vulnerability 43 views
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner.
Continue reading: LG Smart TVs Exposed: Pre-Auth Root Takeover via L…