Category: Red Team

Security researchers reported credential-stealing GitHub Actions workflows planted across tens of thousands of repositories. The campaign illustrates how a poisoned CI workflow can turn source-control automation into a route for…

CISA is urging organizations to update Ivanti Connect Secure after reports of active exploitation of a zero-day authentication-bypass vulnerability. Researchers cited in reporting observed exploitation attempts against honeypot sensors, underscoring…

The curl project released curl 8.23.0 with a fix for CVE-2026-92392, an HTTP/2 upload use-after-free issue affecting curl and libcurl 8.12.0 through 8.22.0. Reporting says a proof of concept demonstrated…

Microsoft’s October 2026 Patch Tuesday addresses a record 1,413 vulnerabilities, including an exploited Windows Shell security-feature bypass. The scale of the release means defenders should make prioritization—not simply raw patch…

Cisco disclosed that attackers are actively exploiting a critical vulnerability in Secure Email Gateway appliances. The issue, tracked as CVE-2026-76519, can allow a remote, unauthenticated attacker to write files and…

SANS NewsBites’ October 13 issue highlights reporting that a Palo Alto GlobalProtect VPN vulnerability, tracked as CVE-2026-0257, has been exploited by ransomware operators. The report is a reminder that remote-access…

Ledger said it was investigating reports of an unauthorized hardware implant in wallets sold through CryptoBilis, according to an October 13 update reported by The Hacker News. The report says…

A report published October 13 says documents obtained by Danish broadcaster TV 2 link a breach involving Denmark’s Central Register of Persons to the use of the password “123456.” The…

New reporting on Zoom security advisories identifies four high-severity vulnerabilities spanning certificate validation, a Zoom Phone buffer overflow, and an Android authorization issue. The reported impact includes information disclosure and…