Apple CoreGraphics Zero-Day Patched After Targeted Attacks - https://www.redpacketsecurity.com/apple-patches-coregraphics-zero-day-exploited-in-attacks/
RedPacket Security
Apple CoreGraphics Zero-Day Patched After Targeted Attacks - RedPacket Security
In a security bulletin published on September 28, Apple credited the Meta Product Security team with discovering the vulnerability, tracked as CVE-2026-86950.
AI Safety Accord: Trump and Six Major AI Firms Sign Super Intelligence Commitment - https://www.redpacketsecurity.com/trump-six-ai-giants-sign-super-intelligence-safety-accord/
RedPacket Security
AI Safety Accord: Trump and Six Major AI Firms Sign Super Intelligence Commitment - RedPacket Security
President Donald Trump and executives from six major AI companies signed the White House Accord on Super Intelligence on September 29. The signatories are
Kiteworks System Restart: Customers Urged to Reboot After Shutdown Notice - https://www.redpacketsecurity.com/kiteworks-urges-customers-to-restart-systems-after-shutdown-notice/
RedPacket Security
Kiteworks System Restart: Customers Urged to Reboot After Shutdown Notice - RedPacket Security
Kiteworks has urged customers to restart their systems following a shutdown notice. The source article text was not included, so details such as which systems
Japanese Railway Cyber Attacks Hit Operators Over the Weekend - https://www.redpacketsecurity.com/japanese-railway-operators-hit-with-weekend-cyber-attacks/
RedPacket Security
Japanese Railway Cyber Attacks Hit Operators Over the Weekend - RedPacket Security
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make
Deepfakes and Business: Report Warns of Growing Costs - https://www.redpacketsecurity.com/deepfakes-are-becoming-a-costly-reality-for-businesses-report-warns/
RedPacket Security
Deepfakes and Business: Report Warns of Growing Costs - RedPacket Security
Deepfakes are becoming a costly reality for businesses, according to a report referenced in the original headline. The source article text was not provided,
Amazon Bedrock AgentCore Flaws: SDK Bugs Could Expose AWS Credentials - https://www.redpacketsecurity.com/amazon-bedrock-agentcore-flaws-could-expose-aws-credentials/
RedPacket Security
Amazon Bedrock AgentCore Flaws: SDK Bugs Could Expose AWS Credentials - RedPacket Security
Two vulnerabilities affected the package-installation helper in the Amazon Bedrock AgentCore Python software development kit (SDK). Tracked as CVE-2026-12530
NeedyMantis Malware: Microsoft Warns of Persistent Network Access - https://www.redpacketsecurity.com/microsoft-warns-needymantis-malware-enables-persistent-network-access/
RedPacket Security
NeedyMantis Malware: Microsoft Warns of Persistent Network Access - RedPacket Security
Microsoft warns that NeedyMantis malware enables persistent network access. The original article text was not included, so this summary is limited to the
CVE Alert: CVE-2026-92245 - croixhaug - Simply Schedule Appointments - https://www.redpacketsecurity.com/cve-alert-cve-2026-92245-croixhaug-simply-schedule-appointments/
RedPacket Security
CVE Alert: CVE-2026-92245 - croixhaug - Simply Schedule Appointments - RedPacket Security
The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the
CVE Alert: CVE-2026-103530 - decolua - 9Router - https://www.redpacketsecurity.com/cve-alert-cve-2026-103530-decolua-9router/
RedPacket Security
CVE Alert: CVE-2026-103530 - decolua - 9Router - RedPacket Security
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the
CVE Alert: CVE-2026-96561 - tigroumeow - AI Engine – The Chatbot, AI Framework & MCP for WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-96561-tigroumeow-ai-engine-the-chatbot-ai-framework-mcp-for-wordpress/
RedPacket Security
CVE Alert: CVE-2026-96561 - tigroumeow - AI Engine – The Chatbot, AI Framework & MCP for WordPress - RedPacket Security
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and
[AURORA] - Ransomware Victim: Laboratorios Roemmers SAICF - https://www.redpacketsecurity.com/aurora-ransomware-victim-laboratorios-roemmers-saicf/
RedPacket Security
[AURORA] - Ransomware Victim: Laboratorios Roemmers SAICF - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-93882 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - https://www.redpacketsecurity.com/cve-alert-cve-2026-93882-thimpress-learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses/
RedPacket Security
CVE Alert: CVE-2026-93882 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - RedPacket Security
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up
CVE Alert: CVE-2026-103536 - ZongXR - Supermarket - https://www.redpacketsecurity.com/cve-alert-cve-2026-103536-zongxr-supermarket/
RedPacket Security
CVE Alert: CVE-2026-103536 - ZongXR - Supermarket - RedPacket Security
A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file
CVE Alert: CVE-2026-19807 - bytecorestack - ByteCoreStack – MCP Connector for AI Tools - https://www.redpacketsecurity.com/cve-alert-cve-2026-19807-bytecorestack-bytecorestack-mcp-connector-for-ai-tools/
RedPacket Security
CVE Alert: CVE-2026-19807 - bytecorestack - ByteCoreStack – MCP Connector for AI Tools - RedPacket Security
The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is
CVE Alert: CVE-2026-85679 - extendify - Extendify - https://www.redpacketsecurity.com/cve-alert-cve-2026-85679-extendify-extendify/
RedPacket Security
CVE Alert: CVE-2026-85679 - extendify - Extendify - RedPacket Security
The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in all versions up to, and including, 3.1.6
Unauthenticated command injection on internet-facing mail servers: trackingCVE-2026-73570 - https://www.redpacketsecurity.com/unauthenticated-command-injection-on-internet-facing-mail-servers-trackingcve-2026-73570/
RedPacket Security
Unauthenticated command injection on internet-facing mail servers: trackingCVE-2026-73570 - RedPacket Security
Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra
[QILIN] - Ransomware Victim: Dynamic Office Solutions - https://www.redpacketsecurity.com/qilin-ransomware-victim-dynamic-office-solutions/
RedPacket Security
[QILIN] - Ransomware Victim: Dynamic Office Solutions - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[EMPERADOR] - Ransomware Victim: LA PONDEROSA - https://www.redpacketsecurity.com/emperador-ransomware-victim-la-ponderosa/
RedPacket Security
[EMPERADOR] - Ransomware Victim: LA PONDEROSA - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Guardian Pharmacy LLC - https://www.redpacketsecurity.com/incransom-ransomware-victim-guardian-pharmacy-llc/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Guardian Pharmacy LLC - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Post Metal Recycling - https://www.redpacketsecurity.com/incransom-ransomware-victim-post-metal-recycling/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Post Metal Recycling - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Den Hartog Industries - https://www.redpacketsecurity.com/incransom-ransomware-victim-den-hartog-industries/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Den Hartog Industries - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating