Vulnerability Cybersecurity News

PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...

Open-Source Network Discovery & Topology Mapping

Open-Source Network Discovery & Topology Mapping

RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...

 RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...

Latest Posts

CVSS 10.0 Bricksforge WordPress Flaw Under Active Exploitation for Unauthenticated RCE

CVSS 10.0 Bricksforge WordPress Flaw Under Active Exploitation for Unauthenticated RCE

RedSide Security October 13, 2026 Vulnerability 84 views

A CVSS 10.0 vulnerability in the Bricksforge WordPress plugin, CVE-2026-85097, is being actively exploited to achieve unauthenticated remote code execution. Site owners should patch immediately and hunt for signs of compromise.

Continue reading: CVSS 10.0 Bricksforge WordPress Flaw Under Active …
SonicWall SMA 1000 Vulnerability Exploited in the Wild Days After Patch

SonicWall SMA 1000 Vulnerability Exploited in the Wild Days After Patch

RedSide Security October 12, 2026 Vulnerability 41 views

A critical pre-authenticated SSRF vulnerability in SonicWall SMA 1000 appliances (CVE-2026-102255, CVSS 10.0) is being actively exploited in the wild, with 135 attempts recorded within days of the patch release.

Continue reading: SonicWall SMA 1000 Vulnerability Exploited in the …
Unpatched Critical LMCache Flaw Allows Unauthenticated Remote Code Execution

Unpatched Critical LMCache Flaw Allows Unauthenticated Remote Code Execution

RedSide Security October 08, 2026 Vulnerability 147 views

A critical, unpatched vulnerability in LMCache's multiprocess mode lets unauthenticated attackers execute code on the cache server via a single network request, with no fixed version currently available.

Continue reading: Unpatched Critical LMCache Flaw Allows Unauthentic…
Pwn2Own Ireland 2026 Day One: 32 Zero‑Days, $388,500, and a Pixel 10 Miss

Pwn2Own Ireland 2026 Day One: 32 Zero‑Days, $388,500, and a Pixel 10 Miss

RedSide Security October 07, 2026 Vulnerability 137 views

Pwn2Own Ireland 2026 opened with 32 unique zero-days exploited and $388,500 awarded, as Samsung Galaxy S26, OpenAI Codex, and smart home devices fell to working attacks while a Google Pixel 10 attempt failed within the time limit.

Continue reading: Pwn2Own Ireland 2026 Day One: 32 Zero‑Days, $388,5…
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

RedSide Security October 06, 2026 Vulnerability 36 views

Researchers have shown that malicious spreadsheets can make LibreOffice and Apache OpenOffice execute code on open—without the usual macro warning—when Java support is enabled. The attack is currently proof-of-concept only, with no known exploitation in the wild.

Continue reading: LibreOffice and OpenOffice Flaws Let Malicious Spr…
Critical Atlassian Flaw Exposes File Read Across 8 Data Center Products

Critical Atlassian Flaw Exposes File Read Across 8 Data Center Products

RedSide Security October 06, 2026 Vulnerability 32 views

Atlassian disclosed a critical unauthenticated file read vulnerability, CVE-2026-21589, affecting eight self-hosted Data Center products. With a CVSS score of 9.3, attackers who know exact file paths can read files from the web application root.

Continue reading: Critical Atlassian Flaw Exposes File Read Across 8…
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

RedSide Security October 06, 2026 Vulnerability 30 views

Researchers have shown that malicious spreadsheets can execute code in LibreOffice and Apache OpenOffice without the usual macro warning, but only when Java support is enabled. The technique is currently a proof of concept with no known attacks in the wild.

Continue reading: LibreOffice and OpenOffice Flaws Let Malicious Spr…
ShieldBreak: Microsoft Defender Zero-Day and RoguePlanet Patch Bypass

ShieldBreak: Microsoft Defender Zero-Day and RoguePlanet Patch Bypass

RedSide Security September 17, 2026 Vulnerability 110 views

ShieldBreak (CVE-2026-69414) is a Microsoft Defender elevation-of-privilege vulnerability linked to research on bypassing mitigations for RoguePlanet (CVE-2026-50656). Explore the technical research, affected components, and defensive detection opportunities.

Continue reading: ShieldBreak: Microsoft Defender Zero-Day and Rogue…