Information Disclosure — Cybersecurity News

Most Popular News

Top stories by views
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
1,758 views
CVE category

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

RedSide Security April 04, 2026
Read: Hackers Exploit CVE-2025-55182 to Breach…
Top 10 High-Risk Vulnerabilities Of 2025 that Exploited in the Wild
694 views

Top 10 High-Risk Vulnerabilities Of 2025 that Exploited in the Wild

Jan 02, 2026
Passwd: A walkthrough of the Google Workspace Password Manager
627 views

Passwd: A walkthrough of the Google Workspace Password Manager

Dec 26, 2025
OpenAI Hardened ChatGPT Atlas Against Prompt Injection Attacks
594 views

OpenAI Hardened ChatGPT Atlas Against Prompt Injection Attacks

Dec 29, 2025
Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)
570 views

Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)

Feb 17, 2026
PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...

June 04, 2026
Open-Source Network Discovery & Topology Mapping

Open-Source Network Discovery & Topology Mapping

RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...

June 03, 2026
RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...

June 03, 2026

Latest Posts

Atlassian CVE-2026-21589: Critical File Access Vulnerability Affects 8 Data Center Products

Atlassian CVE-2026-21589: Critical File Access Vulnerability Affects 8 Data Center Products

RedSide Security October 06, 2026 CVE 135 views

Atlassian has disclosed critical vulnerability CVE-2026-21589 affecting eight self-hosted Data Center products, allowing unauthenticated attackers to read specific files from application root directories. Rated CVSS 9.3, the flaw affects Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye, with Atlassian urging customers to patch immediately.

Cybersecurity Patch Management Enterprise Security Vulnerability Path Traversal Information Disclosure Atlassian CVE-2026-21589 Jira Jira Software Jira Service Management Confluence Bitbucket Bamboo Crowd Crucible Fisheye Data Center Arbitrary File Read Arbitrary File Access Critical Vulnerability Unauthenticated Vulnerability CVSS 9.3 Web Application Security Atlassian Security Data Center Security
Continue reading: Atlassian CVE-2026-21589: Critical File Access Vu…
15-Year-Old NGINX Vulnerability (CVE-2026-42533) Enables Pre-Auth Remote Code Execution

15-Year-Old NGINX Vulnerability (CVE-2026-42533) Enables Pre-Auth Remote Code Execution

RedSide Security July 20, 2026 CVE 354 views

A newly disclosed NGINX vulnerability, CVE-2026-42533, has reportedly been exploitable since 2011 and allows unauthenticated attackers to achieve remote code execution through a flaw in the NGINX script engine. The bug affects both NGINX Open Source and NGINX Plus and has now been patched in versions 1.30.4 and 1.31.3.

Cybersecurity RCE F5 Linux Security Vulnerability Management Memory Corruption Remote Code Execution NGINX NGINX Plus CVE-2026-42533 Heap Buffer Overflow Information Disclosure Web Server Security ASLR Bypass NGINX Security
Continue reading: 15-Year-Old NGINX Vulnerability (CVE-2026-42533) E…