CVE Alert: CVE-2026-101884 - OpenClaw - OpenClaw Windows Node - https://www.redpacketsecurity.com/cve-alert-cve-2026-101884-openclaw-openclaw-windows-node/
RedPacket Security
CVE Alert: CVE-2026-101884 - OpenClaw - OpenClaw Windows Node - RedPacket Security
OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*,
CVE Alert: CVE-2026-103473 - denoland - deno - https://www.redpacketsecurity.com/cve-alert-cve-2026-103473-denoland-deno/
RedPacket Security
CVE Alert: CVE-2026-103473 - denoland - deno - RedPacket Security
Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell arguments are escaped for the wrong
CVE Alert: CVE-2026-101880 - OpenClaw - OpenClaw Windows Node - https://www.redpacketsecurity.com/cve-alert-cve-2026-101880-openclaw-openclaw-windows-node/
RedPacket Security
CVE Alert: CVE-2026-101880 - OpenClaw - OpenClaw Windows Node - RedPacket Security
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser
CVE Alert: CVE-2026-101882 - OpenClaw - OpenClaw Windows Node - https://www.redpacketsecurity.com/cve-alert-cve-2026-101882-openclaw-openclaw-windows-node/
RedPacket Security
CVE Alert: CVE-2026-101882 - OpenClaw - OpenClaw Windows Node - RedPacket Security
OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and
CVE Alert: CVE-2026-103591 - AsyncFuncAI - deepwiki-open - https://www.redpacketsecurity.com/cve-alert-cve-2026-103591-asyncfuncai-deepwiki-open/
RedPacket Security
CVE Alert: CVE-2026-103591 - AsyncFuncAI - deepwiki-open - RedPacket Security
DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url
CVE Alert: CVE-2026-101885 - zeroclaw-labs - ZeroClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-101885-zeroclaw-labs-zeroclaw/
RedPacket Security
CVE Alert: CVE-2026-101885 - zeroclaw-labs - ZeroClaw - RedPacket Security
ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the
CVE Alert: CVE-2024-58387 - Inspur - Haiyue HCM Cloud - https://www.redpacketsecurity.com/cve-alert-cve-2024-58387-inspur-haiyue-hcm-cloud/
RedPacket Security
CVE Alert: CVE-2024-58387 - Inspur - Haiyue HCM Cloud - RedPacket Security
Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote
CVE Alert: CVE-2023-54403 - Yonyou - U8 CRM - https://www.redpacketsecurity.com/cve-alert-cve-2023-54403-yonyou-u8-crm/
RedPacket Security
CVE Alert: CVE-2023-54403 - Yonyou - U8 CRM - RedPacket Security
Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass
CVE Alert: CVE-2023-54402 - iDocView - iDocView - https://www.redpacketsecurity.com/cve-alert-cve-2023-54402-idocview-idocview/
RedPacket Security
CVE Alert: CVE-2023-54402 - iDocView - iDocView - RedPacket Security
iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs
[N0N] - Ransomware Victim: Houston Thyroid & Endocrine Specialists - https://www.redpacketsecurity.com/n0n-ransomware-victim-houston-thyroid-endocrine-specialists/
RedPacket Security
[N0N] - Ransomware Victim: Houston Thyroid & Endocrine Specialists - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Medela - 423,947 breached accounts - https://www.redpacketsecurity.com/medela-423-947-breached-accounts/
RedPacket Security
Medela - 423,947 breached accounts - RedPacket Security
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the
RatHat C2 Panel: Evolving Malware-as-a-Service Model Uses AI to Rank Victims - https://www.redpacketsecurity.com/rathat-s-evolving-c2-panel-points-to-malware-as-a-service-model/
RedPacket Security
RatHat C2 Panel: Evolving Malware-as-a-Service Model Uses AI to Rank Victims - RedPacket Security
In research published on September 28, Cleafy reported that the RatHat implant changed little between late 2025 and September 2026. Its command-and-control
AI-Discovered Vulnerabilities Are More Likely to Enable RCE, Google Finds - https://www.redpacketsecurity.com/ai-found-vulnerabilities-more-likely-to-enable-rce-google-says/
RedPacket Security
AI-Discovered Vulnerabilities Are More Likely to Enable RCE, Google Finds - RedPacket Security
In research published on September 30, GTIG reported that 50% of vulnerabilities it identified as likely AI-discovered resulted in remote code execution
ClickFix Malware Attack Abuses ChatGPT CustomGPTs to Deliver a Trojan - https://www.redpacketsecurity.com/attackers-combine-chatgpt-feature-abuse-with-clickfix-to-deliver-trojan-malware/
RedPacket Security
ClickFix Malware Attack Abuses ChatGPT CustomGPTs to Deliver a Trojan - RedPacket Security
Cybercriminals are exploiting ChatGPT’s CustomGPT feature alongside ClickFix tactics to infect victims with malware, according to cybersecurity firm Huntress.
Apple CoreGraphics Zero-Day Patched After Targeted Attacks - https://www.redpacketsecurity.com/apple-patches-coregraphics-zero-day-exploited-in-attacks/
RedPacket Security
Apple CoreGraphics Zero-Day Patched After Targeted Attacks - RedPacket Security
In a security bulletin published on September 28, Apple credited the Meta Product Security team with discovering the vulnerability, tracked as CVE-2026-86950.
AI Safety Accord: Trump and Six Major AI Firms Sign Super Intelligence Commitment - https://www.redpacketsecurity.com/trump-six-ai-giants-sign-super-intelligence-safety-accord/
RedPacket Security
AI Safety Accord: Trump and Six Major AI Firms Sign Super Intelligence Commitment - RedPacket Security
President Donald Trump and executives from six major AI companies signed the White House Accord on Super Intelligence on September 29. The signatories are
Kiteworks System Restart: Customers Urged to Reboot After Shutdown Notice - https://www.redpacketsecurity.com/kiteworks-urges-customers-to-restart-systems-after-shutdown-notice/
RedPacket Security
Kiteworks System Restart: Customers Urged to Reboot After Shutdown Notice - RedPacket Security
Kiteworks has urged customers to restart their systems following a shutdown notice. The source article text was not included, so details such as which systems
Japanese Railway Cyber Attacks Hit Operators Over the Weekend - https://www.redpacketsecurity.com/japanese-railway-operators-hit-with-weekend-cyber-attacks/
RedPacket Security
Japanese Railway Cyber Attacks Hit Operators Over the Weekend - RedPacket Security
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make
Deepfakes and Business: Report Warns of Growing Costs - https://www.redpacketsecurity.com/deepfakes-are-becoming-a-costly-reality-for-businesses-report-warns/
RedPacket Security
Deepfakes and Business: Report Warns of Growing Costs - RedPacket Security
Deepfakes are becoming a costly reality for businesses, according to a report referenced in the original headline. The source article text was not provided,
Amazon Bedrock AgentCore Flaws: SDK Bugs Could Expose AWS Credentials - https://www.redpacketsecurity.com/amazon-bedrock-agentcore-flaws-could-expose-aws-credentials/
RedPacket Security
Amazon Bedrock AgentCore Flaws: SDK Bugs Could Expose AWS Credentials - RedPacket Security
Two vulnerabilities affected the package-installation helper in the Amazon Bedrock AgentCore Python software development kit (SDK). Tracked as CVE-2026-12530
NeedyMantis Malware: Microsoft Warns of Persistent Network Access - https://www.redpacketsecurity.com/microsoft-warns-needymantis-malware-enables-persistent-network-access/
RedPacket Security
NeedyMantis Malware: Microsoft Warns of Persistent Network Access - RedPacket Security
Microsoft warns that NeedyMantis malware enables persistent network access. The original article text was not included, so this summary is limited to the