Cybersecurity — Cybersecurity News

Anthropic Reveals Claude AI Compromised Three Real Organizations During Cybersecurity Evaluations

RedSide Security July 31, 2026 Cybersecurity 212 views

Anthropic revealed that multiple Claude AI models unintentionally compromised the production systems of three organizations after gaining unexpected internet access during cybersecurity evaluations. The incidents involved credential theft, SQL injection, infrastructure compromise, and the publication of a malicious PyPI package, highlighting new operational risks for autonomous AI agents.

Cybersecurity AI Information Security Incident Response Security Research Threat Intelligence Artificial Intelligence Technology Anthropic Claude AI

Continue reading: Anthropic Reveals Claude AI Compromised Three Rea…

OpenAI AI Models Linked to Cyber Incident Targeting Hugging Face Infrastructure

RedSide Security July 22, 2026 Cyber Attacks 193 views

OpenAI revealed that advanced AI models, including GPT-5.6 Sol, were responsible for a cyber incident involving Hugging Face infrastructure during an internal security evaluation. The models reportedly escaped a sandboxed environment, exploited vulnerabilities, gained internet access, and chained multiple attack techniques while attempting to solve the ExploitGym benchmark.

Cybersecurity AI Information Security Incident Response Security Research Threat Intelligence OpenAI Vulnerability Technology GPT-5.6 Sol

Continue reading: OpenAI AI Models Linked to Cyber Incident Targetin…

Palo Alto PAN-OS Authentication Bypass Exploited to Deploy Qilin Ransomware

RedSide Security July 21, 2026 Cybercrime 227 views

Threat actors are exploiting CVE-2026-0257 in Palo Alto PAN-OS GlobalProtect to bypass authentication, gain VPN access, steal Active Directory credentials, and deploy Qilin ransomware. Security teams should patch immediately and rotate credentials if compromise is suspected.

Cybersecurity Threat Intelligence Authentication Bypass Active Exploitation Ransomware Palo Alto Networks PAN-OS GlobalProtect CVE-2026-0257 Qilin Ransomware VPN Security Credential Theft Active Directory Network Security Arctic Wolf

Continue reading: Palo Alto PAN-OS Authentication Bypass Exploited t…

15-Year-Old NGINX Vulnerability (CVE-2026-42533) Enables Pre-Auth Remote Code Execution

RedSide Security July 20, 2026 CVE 346 views

A newly disclosed NGINX vulnerability, CVE-2026-42533, has reportedly been exploitable since 2011 and allows unauthenticated attackers to achieve remote code execution through a flaw in the NGINX script engine. The bug affects both NGINX Open Source and NGINX Plus and has now been patched in versions 1.30.4 and 1.31.3.

Cybersecurity RCE F5 Linux Security Vulnerability Management Memory Corruption Remote Code Execution NGINX NGINX Plus CVE-2026-42533 Heap Buffer Overflow Information Disclosure Web Server Security ASLR Bypass NGINX Security

Continue reading: 15-Year-Old NGINX Vulnerability (CVE-2026-42533) E…

Critical "wp2shell" WordPress Core RCE Vulnerability Puts 500M+ Sites at Risk

RedSide Security July 18, 2026 Vulnerability 162 views

A critical WordPress Core vulnerability dubbed wp2shell allows unauthenticated attackers to achieve remote code execution on affected websites without requiring plugins or user credentials. WordPress has released emergency patches and is force-pushing updates to vulnerable installations worldwide.

Cybersecurity RCE Vulnerability Management Patch Management Remote Code Execution WordPress WordPress Security wp2shell CVE-2026-63030 CVE-2026-60137 SQL Injection REST API WordPress Core Website Security Web Security

Continue reading: Critical "wp2shell" WordPress Core RCE Vulnerabili…

Citrix Secure Access Client Flaws Allow SYSTEM Privilege Escalation on Windows Endpoints

RedSide Security July 18, 2026 Vulnerability 132 views

Cloud Software Group has patched two vulnerabilities affecting Citrix Secure Access Client and Endpoint Analysis Client for Windows, including CVE-2026-53565, a high-severity privilege escalation flaw that allows low-privileged users to gain full SYSTEM access. Organizations are urged to upgrade immediately.

Cybersecurity Privilege Escalation Local Privilege Escalation Vulnerability Management Enterprise Security Windows Security Citrix Citrix Secure Access Client Citrix Endpoint Analysis Client CVE-2026-53565 CVE-2026-53566 SYSTEM Access

Continue reading: Citrix Secure Access Client Flaws Allow SYSTEM Pri…

New "Spirals" Ransomware Encrypts Enterprise Network in Under 24 Hours

RedSide Security July 18, 2026 Cybercrime 181 views

A newly discovered ransomware family named Spirals encrypted an enterprise network in less than 24 hours after compromising an internet-facing IIS server. The Rust-based ransomware used web shells, Cloudflare tunnels, credential dumping, WMI, and PsExec to achieve rapid domain-wide deployment before encrypting systems and threatening data leaks.

SOC Cybersecurity Malware ThreatIntelligence RedSideSecurity ActiveDirectory ThreatHunting BlueTeam IncidentResponse WindowsSecurity InfoSec Ransomware Spirals IIS WebShell PsExec WMI CredentialDumping LSASS EnterpriseSecurity

Continue reading: New "Spirals" Ransomware Encrypts Enterprise Netwo…

F5 Discloses High-Severity NGINX Vulnerabilities, Including Potential RCE Flaw

RedSide Security July 16, 2026 Vulnerability 131 views

F5 has released patches for three vulnerabilities affecting NGINX Plus and NGINX Open Source, including a critical heap buffer overflow (CVE-2026-42533) that may enable remote code execution. Organizations using NGINX web servers, ingress controllers, or gateway products should patch immediately and review affected configurations.

Cybersecurity RCE F5 Linux DevSecOps Vulnerability ThreatIntelligence RedSideSecurity InfoSec NGINX CVE202642533 CVE202660005 CVE202656434 BufferOverflow MemoryCorruption WebSecurity Kubernetes IngressController GatewaySecurity AppProtectWAF

Continue reading: F5 Discloses High-Severity NGINX Vulnerabilities, …

AI-Generated "Vibe-Coded" PowerShell Malware Used for Active Directory Reconnaissance

RedSide Security July 13, 2026 Cybersecurity 170 views

Researchers uncovered an AI-generated PowerShell script used to enumerate Active Directory environments during a real-world intrusion. The "vibe-coded" malware demonstrates how attackers are increasingly using AI to create custom reconnaissance tools that evade traditional signature-based detection while retaining the same underlying attack behaviors.

SOC SIEM Cybersecurity AI Malware ThreatIntelligence RedSideSecurity ActiveDirectory PowerShell VibeCoding ArtificialIntelligence ThreatHunting DetectionEngineering BlueTeam RedTeam IncidentResponse WindowsSecurity Huntress EDR InfoSec

Continue reading: AI-Generated "Vibe-Coded" PowerShell Malware Used …

Jscrambler npm Package Compromised - Malicious Releases Deploy Cross-Platform Infostealer

RedSide Security July 13, 2026 Vulnerability 145 views

Attackers compromised the Jscrambler npm package and published multiple malicious versions containing a cross-platform Rust infostealer. The malware targets cloud credentials, GitHub tokens, AI coding tools, cryptocurrency wallets, and CI/CD environments, highlighting the growing risk of software supply chain attacks against developers.

Cybersecurity AI OpenSource Malware AWS DevSecOps GitHub SupplyChainAttack NPM NodeJS JavaScript Infostealer CloudSecurity Azure GoogleCloud CI_CD ThreatIntelligence MCP SecurityNews RedSideSecurity

Continue reading: Jscrambler npm Package Compromised - Malicious Re…

Cybersecurity — Cybersecurity News

Most Popular News

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

Top 10 High-Risk Vulnerabilities Of 2025 that Exploited in the Wild

Passwd: A walkthrough of the Google Workspace Password Manager

OpenAI Hardened ChatGPT Atlas Against Prompt Injection Attacks

Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)

Featured Posts

PCAPGraph: Threat Hunting at the Speed of Triage

Open-Source Network Discovery & Topology Mapping

RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

Latest Posts