CVE Alert: CVE-2026-101885 - zeroclaw-labs - ZeroClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-101885-zeroclaw-labs-zeroclaw/
RedPacket Security
CVE Alert: CVE-2026-101885 - zeroclaw-labs - ZeroClaw - RedPacket Security
ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the
CVE Alert: CVE-2024-58387 - Inspur - Haiyue HCM Cloud - https://www.redpacketsecurity.com/cve-alert-cve-2024-58387-inspur-haiyue-hcm-cloud/
RedPacket Security
CVE Alert: CVE-2024-58387 - Inspur - Haiyue HCM Cloud - RedPacket Security
Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote
CVE Alert: CVE-2023-54403 - Yonyou - U8 CRM - https://www.redpacketsecurity.com/cve-alert-cve-2023-54403-yonyou-u8-crm/
RedPacket Security
CVE Alert: CVE-2023-54403 - Yonyou - U8 CRM - RedPacket Security
Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass
CVE Alert: CVE-2023-54402 - iDocView - iDocView - https://www.redpacketsecurity.com/cve-alert-cve-2023-54402-idocview-idocview/
RedPacket Security
CVE Alert: CVE-2023-54402 - iDocView - iDocView - RedPacket Security
iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs
[N0N] - Ransomware Victim: Houston Thyroid & Endocrine Specialists - https://www.redpacketsecurity.com/n0n-ransomware-victim-houston-thyroid-endocrine-specialists/
RedPacket Security
[N0N] - Ransomware Victim: Houston Thyroid & Endocrine Specialists - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Medela - 423,947 breached accounts - https://www.redpacketsecurity.com/medela-423-947-breached-accounts/
RedPacket Security
Medela - 423,947 breached accounts - RedPacket Security
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the
RatHat C2 Panel: Evolving Malware-as-a-Service Model Uses AI to Rank Victims - https://www.redpacketsecurity.com/rathat-s-evolving-c2-panel-points-to-malware-as-a-service-model/
RedPacket Security
RatHat C2 Panel: Evolving Malware-as-a-Service Model Uses AI to Rank Victims - RedPacket Security
In research published on September 28, Cleafy reported that the RatHat implant changed little between late 2025 and September 2026. Its command-and-control
AI-Discovered Vulnerabilities Are More Likely to Enable RCE, Google Finds - https://www.redpacketsecurity.com/ai-found-vulnerabilities-more-likely-to-enable-rce-google-says/
RedPacket Security
AI-Discovered Vulnerabilities Are More Likely to Enable RCE, Google Finds - RedPacket Security
In research published on September 30, GTIG reported that 50% of vulnerabilities it identified as likely AI-discovered resulted in remote code execution
ClickFix Malware Attack Abuses ChatGPT CustomGPTs to Deliver a Trojan - https://www.redpacketsecurity.com/attackers-combine-chatgpt-feature-abuse-with-clickfix-to-deliver-trojan-malware/
RedPacket Security
ClickFix Malware Attack Abuses ChatGPT CustomGPTs to Deliver a Trojan - RedPacket Security
Cybercriminals are exploiting ChatGPT’s CustomGPT feature alongside ClickFix tactics to infect victims with malware, according to cybersecurity firm Huntress.
Apple CoreGraphics Zero-Day Patched After Targeted Attacks - https://www.redpacketsecurity.com/apple-patches-coregraphics-zero-day-exploited-in-attacks/
RedPacket Security
Apple CoreGraphics Zero-Day Patched After Targeted Attacks - RedPacket Security
In a security bulletin published on September 28, Apple credited the Meta Product Security team with discovering the vulnerability, tracked as CVE-2026-86950.
AI Safety Accord: Trump and Six Major AI Firms Sign Super Intelligence Commitment - https://www.redpacketsecurity.com/trump-six-ai-giants-sign-super-intelligence-safety-accord/
RedPacket Security
AI Safety Accord: Trump and Six Major AI Firms Sign Super Intelligence Commitment - RedPacket Security
President Donald Trump and executives from six major AI companies signed the White House Accord on Super Intelligence on September 29. The signatories are
Kiteworks System Restart: Customers Urged to Reboot After Shutdown Notice - https://www.redpacketsecurity.com/kiteworks-urges-customers-to-restart-systems-after-shutdown-notice/
RedPacket Security
Kiteworks System Restart: Customers Urged to Reboot After Shutdown Notice - RedPacket Security
Kiteworks has urged customers to restart their systems following a shutdown notice. The source article text was not included, so details such as which systems
Japanese Railway Cyber Attacks Hit Operators Over the Weekend - https://www.redpacketsecurity.com/japanese-railway-operators-hit-with-weekend-cyber-attacks/
RedPacket Security
Japanese Railway Cyber Attacks Hit Operators Over the Weekend - RedPacket Security
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make
Deepfakes and Business: Report Warns of Growing Costs - https://www.redpacketsecurity.com/deepfakes-are-becoming-a-costly-reality-for-businesses-report-warns/
RedPacket Security
Deepfakes and Business: Report Warns of Growing Costs - RedPacket Security
Deepfakes are becoming a costly reality for businesses, according to a report referenced in the original headline. The source article text was not provided,
Amazon Bedrock AgentCore Flaws: SDK Bugs Could Expose AWS Credentials - https://www.redpacketsecurity.com/amazon-bedrock-agentcore-flaws-could-expose-aws-credentials/
RedPacket Security
Amazon Bedrock AgentCore Flaws: SDK Bugs Could Expose AWS Credentials - RedPacket Security
Two vulnerabilities affected the package-installation helper in the Amazon Bedrock AgentCore Python software development kit (SDK). Tracked as CVE-2026-12530
NeedyMantis Malware: Microsoft Warns of Persistent Network Access - https://www.redpacketsecurity.com/microsoft-warns-needymantis-malware-enables-persistent-network-access/
RedPacket Security
NeedyMantis Malware: Microsoft Warns of Persistent Network Access - RedPacket Security
Microsoft warns that NeedyMantis malware enables persistent network access. The original article text was not included, so this summary is limited to the
CVE Alert: CVE-2026-92245 - croixhaug - Simply Schedule Appointments - https://www.redpacketsecurity.com/cve-alert-cve-2026-92245-croixhaug-simply-schedule-appointments/
RedPacket Security
CVE Alert: CVE-2026-92245 - croixhaug - Simply Schedule Appointments - RedPacket Security
The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the
CVE Alert: CVE-2026-103530 - decolua - 9Router - https://www.redpacketsecurity.com/cve-alert-cve-2026-103530-decolua-9router/
RedPacket Security
CVE Alert: CVE-2026-103530 - decolua - 9Router - RedPacket Security
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the
CVE Alert: CVE-2026-96561 - tigroumeow - AI Engine – The Chatbot, AI Framework & MCP for WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-96561-tigroumeow-ai-engine-the-chatbot-ai-framework-mcp-for-wordpress/
RedPacket Security
CVE Alert: CVE-2026-96561 - tigroumeow - AI Engine – The Chatbot, AI Framework & MCP for WordPress - RedPacket Security
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and
[AURORA] - Ransomware Victim: Laboratorios Roemmers SAICF - https://www.redpacketsecurity.com/aurora-ransomware-victim-laboratorios-roemmers-saicf/
RedPacket Security
[AURORA] - Ransomware Victim: Laboratorios Roemmers SAICF - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-93882 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - https://www.redpacketsecurity.com/cve-alert-cve-2026-93882-thimpress-learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses/
RedPacket Security
CVE Alert: CVE-2026-93882 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - RedPacket Security
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up