NeedyMantis Malware: Microsoft Warns of Persistent Network Access - https://www.redpacketsecurity.com/microsoft-warns-needymantis-malware-enables-persistent-network-access/
RedPacket Security
NeedyMantis Malware: Microsoft Warns of Persistent Network Access - RedPacket Security
Microsoft warns that NeedyMantis malware enables persistent network access. The original article text was not included, so this summary is limited to the
CVE Alert: CVE-2026-92245 - croixhaug - Simply Schedule Appointments - https://www.redpacketsecurity.com/cve-alert-cve-2026-92245-croixhaug-simply-schedule-appointments/
RedPacket Security
CVE Alert: CVE-2026-92245 - croixhaug - Simply Schedule Appointments - RedPacket Security
The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the
CVE Alert: CVE-2026-103530 - decolua - 9Router - https://www.redpacketsecurity.com/cve-alert-cve-2026-103530-decolua-9router/
RedPacket Security
CVE Alert: CVE-2026-103530 - decolua - 9Router - RedPacket Security
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the
CVE Alert: CVE-2026-96561 - tigroumeow - AI Engine – The Chatbot, AI Framework & MCP for WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-96561-tigroumeow-ai-engine-the-chatbot-ai-framework-mcp-for-wordpress/
RedPacket Security
CVE Alert: CVE-2026-96561 - tigroumeow - AI Engine – The Chatbot, AI Framework & MCP for WordPress - RedPacket Security
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and
[AURORA] - Ransomware Victim: Laboratorios Roemmers SAICF - https://www.redpacketsecurity.com/aurora-ransomware-victim-laboratorios-roemmers-saicf/
RedPacket Security
[AURORA] - Ransomware Victim: Laboratorios Roemmers SAICF - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-93882 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - https://www.redpacketsecurity.com/cve-alert-cve-2026-93882-thimpress-learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses/
RedPacket Security
CVE Alert: CVE-2026-93882 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - RedPacket Security
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up
CVE Alert: CVE-2026-103536 - ZongXR - Supermarket - https://www.redpacketsecurity.com/cve-alert-cve-2026-103536-zongxr-supermarket/
RedPacket Security
CVE Alert: CVE-2026-103536 - ZongXR - Supermarket - RedPacket Security
A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file
CVE Alert: CVE-2026-19807 - bytecorestack - ByteCoreStack – MCP Connector for AI Tools - https://www.redpacketsecurity.com/cve-alert-cve-2026-19807-bytecorestack-bytecorestack-mcp-connector-for-ai-tools/
RedPacket Security
CVE Alert: CVE-2026-19807 - bytecorestack - ByteCoreStack – MCP Connector for AI Tools - RedPacket Security
The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is
CVE Alert: CVE-2026-85679 - extendify - Extendify - https://www.redpacketsecurity.com/cve-alert-cve-2026-85679-extendify-extendify/
RedPacket Security
CVE Alert: CVE-2026-85679 - extendify - Extendify - RedPacket Security
The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in all versions up to, and including, 3.1.6
Unauthenticated command injection on internet-facing mail servers: trackingCVE-2026-73570 - https://www.redpacketsecurity.com/unauthenticated-command-injection-on-internet-facing-mail-servers-trackingcve-2026-73570/
RedPacket Security
Unauthenticated command injection on internet-facing mail servers: trackingCVE-2026-73570 - RedPacket Security
Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra
[QILIN] - Ransomware Victim: Dynamic Office Solutions - https://www.redpacketsecurity.com/qilin-ransomware-victim-dynamic-office-solutions/
RedPacket Security
[QILIN] - Ransomware Victim: Dynamic Office Solutions - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[EMPERADOR] - Ransomware Victim: LA PONDEROSA - https://www.redpacketsecurity.com/emperador-ransomware-victim-la-ponderosa/
RedPacket Security
[EMPERADOR] - Ransomware Victim: LA PONDEROSA - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Guardian Pharmacy LLC - https://www.redpacketsecurity.com/incransom-ransomware-victim-guardian-pharmacy-llc/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Guardian Pharmacy LLC - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Post Metal Recycling - https://www.redpacketsecurity.com/incransom-ransomware-victim-post-metal-recycling/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Post Metal Recycling - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Den Hartog Industries - https://www.redpacketsecurity.com/incransom-ransomware-victim-den-hartog-industries/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Den Hartog Industries - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[GENESIS] - Ransomware Victim: Vera Science - https://www.redpacketsecurity.com/genesis-ransomware-victim-vera-science/
RedPacket Security
[GENESIS] - Ransomware Victim: Vera Science - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Rimrock Foundation - https://www.redpacketsecurity.com/incransom-ransomware-victim-rimrock-foundation/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Rimrock Foundation - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[GENESIS] - Ransomware Victim: Owens Distributors - https://www.redpacketsecurity.com/genesis-ransomware-victim-owens-distributors/
RedPacket Security
[GENESIS] - Ransomware Victim: Owens Distributors - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Northern Counties Health Care - https://www.redpacketsecurity.com/incransom-ransomware-victim-northern-counties-health-care/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Northern Counties Health Care - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[GENESIS] - Ransomware Victim: VPNE - https://www.redpacketsecurity.com/genesis-ransomware-victim-vpne/
RedPacket Security
[GENESIS] - Ransomware Victim: VPNE - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[GENESIS] - Ransomware Victim: TLC Perinatal - https://www.redpacketsecurity.com/genesis-ransomware-victim-tlc-perinatal/
RedPacket Security
[GENESIS] - Ransomware Victim: TLC Perinatal - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating