Cobalt Strike Beacon Detected - 117[.]72[.]181[.]104:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-117-72-181-104-port-443-31/
RedPacket Security
Cobalt Strike Beacon Detected - 117[.]72[.]181[.]104:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 152[.]136[.]253[.]101:8080 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-152-136-253-101-port-8080/
RedPacket Security
Cobalt Strike Beacon Detected - 152[.]136[.]253[.]101:8080 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
[RHYSIDA] - Ransomware Victim: Mat Bao Corporation - https://www.redpacketsecurity.com/rhysida-ransomware-victim-mat-bao-corporation/
RedPacket Security
[RHYSIDA] - Ransomware Victim: Mat Bao Corporation - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Thai Lion Air - https://www.redpacketsecurity.com/qilin-ransomware-victim-thai-lion-air/
RedPacket Security
[QILIN] - Ransomware Victim: Thai Lion Air - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-93756 - smub - Smash Balloon Social Post Feed – Simple Social Feeds for WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-93756-smub-smash-balloon-social-post-feed-simple-social-feeds-for-wordpress/
RedPacket Security
CVE Alert: CVE-2026-93756 - smub - Smash Balloon Social Post Feed – Simple Social Feeds for WordPress - RedPacket Security
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment
CVE Alert: CVE-2026-95670 - mihdan - No External Links - https://www.redpacketsecurity.com/cve-alert-cve-2026-95670-mihdan-no-external-links/
RedPacket Security
CVE Alert: CVE-2026-95670 - mihdan - No External Links - RedPacket Security
The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect in all versions up to, and
CVE Alert: CVE-2026-96567 - websoudan - MW WP Form - https://www.redpacketsecurity.com/cve-alert-cve-2026-96567-websoudan-mw-wp-form/
RedPacket Security
CVE Alert: CVE-2026-96567 - websoudan - MW WP Form - RedPacket Security
The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_id' parameter in all versions up to, and including, 5.1.7 due
CVE Alert: CVE-2026-96871 - kitae-park - Mang Board - https://www.redpacketsecurity.com/cve-alert-cve-2026-96871-kitae-park-mang-board/
RedPacket Security
CVE Alert: CVE-2026-96871 - kitae-park - Mang Board - RedPacket Security
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.2 due
CVE Alert: CVE-2026-96566 - satollo - Newsletter – Send awesome emails from WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-96566-satollo-newsletter-send-awesome-emails-from-wordpress/
RedPacket Security
CVE Alert: CVE-2026-96566 - satollo - Newsletter – Send awesome emails from WordPress - RedPacket Security
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'np1' Custom Field Parameter in all
CVE Alert: CVE-2026-87920 - boldgrid - W3 Total Cache - https://www.redpacketsecurity.com/cve-alert-cve-2026-87920-boldgrid-w3-total-cache/
RedPacket Security
CVE Alert: CVE-2026-87920 - boldgrid - W3 Total Cache - RedPacket Security
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all versions up
CVE Alert: CVE-2026-97342 - jetmonsters - JetFormBuilder — Dynamic Blocks Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-97342-jetmonsters-jetformbuilder-dynamic-blocks-form-builder/
RedPacket Security
CVE Alert: CVE-2026-97342 - jetmonsters - JetFormBuilder — Dynamic Blocks Form Builder - RedPacket Security
The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update
CVE Alert: CVE-2026-104416 - TryGhost - Ghost - https://www.redpacketsecurity.com/cve-alert-cve-2026-104416-tryghost-ghost/
RedPacket Security
CVE Alert: CVE-2026-104416 - TryGhost - Ghost - RedPacket Security
Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending
CVE Alert: CVE-2026-104437 - ZcashFoundation - zebra - https://www.redpacketsecurity.com/cve-alert-cve-2026-104437-zcashfoundation-zebra/
RedPacket Security
CVE Alert: CVE-2026-104437 - ZcashFoundation - zebra - RedPacket Security
Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE
CVE Alert: CVE-2026-97641 - comesio - Relevanssi – A Better Search - https://www.redpacketsecurity.com/cve-alert-cve-2026-97641-comesio-relevanssi-a-better-search/
RedPacket Security
CVE Alert: CVE-2026-97641 - comesio - Relevanssi – A Better Search - RedPacket Security
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including,
CVE Alert: CVE-2026-104457 - YesWiki - yeswiki - https://www.redpacketsecurity.com/cve-alert-cve-2026-104457-yeswiki-yeswiki/
RedPacket Security
CVE Alert: CVE-2026-104457 - YesWiki - yeswiki - RedPacket Security
YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filterN attribute tokens in quotes and
CVE Alert: CVE-2026-104445 - YesWiki - yeswiki - https://www.redpacketsecurity.com/cve-alert-cve-2026-104445-yeswiki-yeswiki/
RedPacket Security
CVE Alert: CVE-2026-104445 - YesWiki - yeswiki - RedPacket Security
YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the verified HTTP signature signer to the
AI Cyber Attacks: Microsoft Warns Post-Compromise Activity Now Takes Minutes - https://www.redpacketsecurity.com/microsoft-ai-cuts-post-compromise-attack-time-to-minutes/
RedPacket Security
AI Cyber Attacks: Microsoft Warns Post-Compromise Activity Now Takes Minutes - RedPacket Security
AI-powered cyber attacks are accelerating. Microsoft’s Digital Defense Report 2026 warns that attackers can now compress parts of the post-compromise
KillSec Ransomware Group Targeted in Arrests and Seizures - https://www.redpacketsecurity.com/police-target-killsec-ransomware-group-with-arrests-and-seizures/
RedPacket Security
KillSec Ransomware Group Targeted in Arrests and Seizures - RedPacket Security
KillSec ransomware operations have been disrupted in an international law enforcement action that included arrests, server seizures and the takedown of the
[NIGHTSPIRE] - Ransomware Victim: Forma Therapeutics Holdings, Inc[.] - https://www.redpacketsecurity.com/nightspire-ransomware-victim-forma-therapeutics-holdings-inc/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: Forma Therapeutics Holdings, Inc[.] - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SPIRALS] - Ransomware Victim: seven seas group - https://www.redpacketsecurity.com/spirals-ransomware-victim-seven-seas-group/
RedPacket Security
[SPIRALS] - Ransomware Victim: seven seas group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-104609 - onetwothreeneth - HospitalManagementSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-104609-onetwothreeneth-hospitalmanagementsystem/
RedPacket Security
CVE Alert: CVE-2026-104609 - onetwothreeneth - HospitalManagementSystem - RedPacket Security
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of