Application Security — Cybersecurity News

Most Popular News

Top stories by views
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
1,591 views
CVE category

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

RedSide Security April 04, 2026
Read: Hackers Exploit CVE-2025-55182 to Breach…
Passwd: A walkthrough of the Google Workspace Password Manager
472 views

Passwd: A walkthrough of the Google Workspace Password Manager

Dec 26, 2025
Top 10 High-Risk Vulnerabilities Of 2025 that Exploited in the Wild
462 views

Top 10 High-Risk Vulnerabilities Of 2025 that Exploited in the Wild

Jan 02, 2026
Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)
458 views

Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)

Feb 17, 2026
OpenAI Hardened ChatGPT Atlas Against Prompt Injection Attacks
443 views

OpenAI Hardened ChatGPT Atlas Against Prompt Injection Attacks

Dec 29, 2025
PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...

June 04, 2026
Open-Source Network Discovery & Topology Mapping

Open-Source Network Discovery & Topology Mapping

RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...

June 03, 2026
RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...

June 03, 2026

Latest Posts

Adobe ColdFusion Critical Vulnerabilities Enable Unauthenticated Remote Code Execution

Adobe ColdFusion Critical Vulnerabilities Enable Unauthenticated Remote Code Execution

RedSide Security August 12, 2026 CVE 46 views

Adobe has released urgent security updates for ColdFusion 2025 and 2023, fixing multiple critical vulnerabilities including a CVSS 10.0 unauthenticated OS command injection flaw that could enable remote code execution and full server compromise. Organizations should patch exposed ColdFusion deployments immediately.

Cybersecurity Information Security Vulnerability Management Threat Intelligence Enterprise Security Application Security Remote Code Execution Web Security Security Updates
Continue reading: Adobe ColdFusion Critical Vulnerabilities Enable U…
Critical Cursor IDE Flaws Enable Full Sandbox Escape and Remote Code Execution

Critical Cursor IDE Flaws Enable Full Sandbox Escape and Remote Code Execution

RedSide Security July 01, 2026 Vulnerability 94 views

Two critical vulnerabilities in Cursor IDE, tracked as CVE-2026-50548 and CVE-2026-50549, allow attackers to escape the platform's sandbox and achieve full remote code execution through prompt injection. The flaws demonstrate how AI-driven coding agents can expose traditional software attack surfaces, leading to system compromise without user approval.

Cybersecurity Prompt Injection AI Security DevSecOps Application Security Cursor IDE DuneSlide CVE-2026-50548 CVE-2026-50549 Remote Code Execution Sandbox Escape AI Coding Agents Vulnerability Research
Continue reading: Critical Cursor IDE Flaws Enable Full Sandbox Esca…
Researchers Find 282 iPhone AI Apps Exposing Paid AI Access Through Leaked API Credentials

Researchers Find 282 iPhone AI Apps Exposing Paid AI Access Through Leaked API Credentials

RedSide Security June 30, 2026 Vulnerability 77 views

Researchers analyzing 444 AI chatbot apps on iPhone found that 282 applications exposed paid AI access through leaked API keys, reusable tokens, or unsecured backend services. The findings highlight growing risks of LLMJacking attacks, where threat actors abuse stolen AI credentials to generate costly unauthorized model usage.

Information Security AI Security Cloud Security OpenAI Artificial Intelligence API Security API Keys LLM Security LLMJacking Google Gemini Mobile Security iOS Security Application Security Data Exposure Credential Leakage Token Security App Store Security Wake Forest University Cybersecurity Research AI Applications
Continue reading: Researchers Find 282 iPhone AI Apps Exposing Paid …