CloudSyncD macOS Backdoor Disguised as a Fake Zoom Installer - https://www.redpacketsecurity.com/cloudsyncd-macos-backdoor-hides-behind-fake-zoom-installer/
RedPacket Security
CloudSyncD macOS Backdoor Disguised as a Fake Zoom Installer - RedPacket Security
The CloudSyncD macOS backdoor is being distributed through a fake Zoom installer that asks users for their account password before launching a hidden
AI Policy Phishing: China-Linked Hackers Impersonate Experts to Target US Insiders - https://www.redpacketsecurity.com/china-linked-hackers-impersonate-ai-experts-to-target-us-policy-insiders/
RedPacket Security
AI Policy Phishing: China-Linked Hackers Impersonate Experts to Target US Insiders - RedPacket Security
Proofpoint tracks the group as TA419. In research published October 1, the company said TA419 has carried out credential-phishing campaigns against staff at
Cisco Catalyst SD-WAN Zero-Day: Critical Vulnerability Under Active Exploitation - https://www.redpacketsecurity.com/critical-cisco-catalyst-sd-wan-zero-day-under-active-exploitation/
RedPacket Security
Cisco Catalyst SD-WAN Zero-Day: Critical Vulnerability Under Active Exploitation - RedPacket Security
The Cisco Catalyst SD-WAN zero-day described in the supplied title is under active exploitation. The original article text was not provided, so further
AI in SOC: Boosting Analyst Capacity While Limiting Skill Development - https://www.redpacketsecurity.com/ai-boosts-soc-analyst-capacity-but-limits-skill-development/
RedPacket Security
AI in SOC: Boosting Analyst Capacity While Limiting Skill Development - RedPacket Security
AI can boost SOC analyst capacity, but its role in security operations may also limit opportunities for skill development.
Securing the Internet of Things: A Practical Guide for Organisations - https://www.redpacketsecurity.com/securing-the-internet-of-things-a-practical-guide-for-organisations/
RedPacket Security
Securing the Internet of Things: A Practical Guide for Organisations - RedPacket Security
The Internet of Things (IoT) comprises connected physical devices that collect, process or exchange data, from cameras and sensors to building controls and
[INCRANSOM] - Ransomware Victim: Sangre de Cristo Electric Association - https://www.redpacketsecurity.com/incransom-ransomware-victim-sangre-de-cristo-electric-association/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Sangre de Cristo Electric Association - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-103761 - kvcache-ai - Mooncake - https://www.redpacketsecurity.com/cve-alert-cve-2026-103761-kvcache-ai-mooncake/
RedPacket Security
CVE Alert: CVE-2026-103761 - kvcache-ai - Mooncake - RedPacket Security
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated
CVE Alert: CVE-2026-86344 - Red Hat - Red Hat Directory Server 11 - https://www.redpacketsecurity.com/cve-alert-cve-2026-86344-red-hat-red-hat-directory-server-11/
RedPacket Security
CVE Alert: CVE-2026-86344 - Red Hat - Red Hat Directory Server 11 - RedPacket Security
A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete
CVE Alert: CVE-2026-104051 - HaschekSolutions - pictshare - https://www.redpacketsecurity.com/cve-alert-cve-2026-104051-hascheksolutions-pictshare/
RedPacket Security
CVE Alert: CVE-2026-104051 - HaschekSolutions - pictshare - RedPacket Security
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader
[BARRACUDA] - Ransomware Victim: Automovil Club del Ecuador ANETA - https://www.redpacketsecurity.com/barracuda-ransomware-victim-automovil-club-del-ecuador-aneta/
RedPacket Security
[BARRACUDA] - Ransomware Victim: Automovil Club del Ecuador ANETA - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[DEADLOCK] - Ransomware Victim: UNION FA - https://www.redpacketsecurity.com/deadlock-ransomware-victim-union-fa/
RedPacket Security
[DEADLOCK] - Ransomware Victim: UNION FA - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[DEADLOCK] - Ransomware Victim: Far West Contractors - https://www.redpacketsecurity.com/deadlock-ransomware-victim-far-west-contractors/
RedPacket Security
[DEADLOCK] - Ransomware Victim: Far West Contractors - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-10026 - CTX - CTX Feed Pro - https://www.redpacketsecurity.com/cve-alert-cve-2026-10026-ctx-ctx-feed-pro/
RedPacket Security
CVE Alert: CVE-2026-10026 - CTX - CTX Feed Pro - RedPacket Security
The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input
CVE Alert: CVE-2026-103766 - MacWarrior - clipbucket-v5 - https://www.redpacketsecurity.com/cve-alert-cve-2026-103766-macwarrior-clipbucket-v5/
RedPacket Security
CVE Alert: CVE-2026-103766 - MacWarrior - clipbucket-v5 - RedPacket Security
ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager_access permission to inject SQL via
CVE Alert: CVE-2026-104123 - SourceCodester - Online Reviewer Management System - https://www.redpacketsecurity.com/cve-alert-cve-2026-104123-sourcecodester-online-reviewer-management-system/
RedPacket Security
CVE Alert: CVE-2026-104123 - SourceCodester - Online Reviewer Management System - RedPacket Security
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file
CVE Alert: CVE-2026-93367 - wp-buy - Visitor Traffic Real Time Statistics pro - https://www.redpacketsecurity.com/cve-alert-cve-2026-93367-wp-buy-visitor-traffic-real-time-statistics-pro/
RedPacket Security
CVE Alert: CVE-2026-93367 - wp-buy - Visitor Traffic Real Time Statistics pro - RedPacket Security
The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and
CVE Alert: CVE-2026-104120 - modelcontextprotocol - mcp-server-fetch - https://www.redpacketsecurity.com/cve-alert-cve-2026-104120-modelcontextprotocol-mcp-server-fetch/
RedPacket Security
CVE Alert: CVE-2026-104120 - modelcontextprotocol - mcp-server-fetch - RedPacket Security
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function
CVE Alert: CVE-2026-15897 - WebRehab - Super Forms – Drag & Drop Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-15897-webrehab-super-forms-drag-drop-form-builder/
RedPacket Security
CVE Alert: CVE-2026-15897 - WebRehab - Super Forms – Drag & Drop Form Builder - RedPacket Security
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This
CVE Alert: CVE-2026-90438 - kstover - Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-90438-kstover-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-ai-form-builder/
RedPacket Security
CVE Alert: CVE-2026-90438 - kstover - Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder…
The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text (RTE)
[KRYBIT] - Ransomware Victim: www[.]kres[.]cz - https://www.redpacketsecurity.com/krybit-ransomware-victim-www-kres-cz/
RedPacket Security
[KRYBIT] - Ransomware Victim: www[.]kres[.]cz - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SETTRA] - Ransomware Victim: goldenpearfunding[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-goldenpearfunding-com/
RedPacket Security
[SETTRA] - Ransomware Victim: goldenpearfunding[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating