HackerOne Bug Bounty Disclosure: sql-injection-found-on-ibm-com-subdomain-xetnus - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-sql-injection-found-on-ibm-com-subdomain-xetnus/
RedPacket Security
HackerOne Bug Bounty Disclosure: sql-injection-found-on-ibm-com-subdomain-xetnus - RedPacket Security
CompanyIBM
HackerOne Bug Bounty Disclosure: unauthenticated-disclosure-of-private-and-hidden-forum-content-in-bbpress-via-the-wordpress-core-rest-single-item-endpoint-winston-crooker - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-unauthenticated-disclosure-of-private-and-hidden-forum-content-in-bbpress-via-the-wordpress-core-rest-single-item-endpoint-winston-crooker/
RedPacket Security
HackerOne Bug Bounty Disclosure: unauthenticated-disclosure-of-private-and-hidden-forum-content-in-bbpress-via-the-wordpress-core…
CompanyWordPress
[DEADLOCK] - Ransomware Victim: Aeroklas Duys / Duys Engineering Group - https://www.redpacketsecurity.com/deadlock-ransomware-victim-aeroklas-duys-duys-engineering-group/
RedPacket Security
[DEADLOCK] - Ransomware Victim: Aeroklas Duys / Duys Engineering Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: RingSide Creative - https://www.redpacketsecurity.com/qilin-ransomware-victim-ringside-creative/
RedPacket Security
[QILIN] - Ransomware Victim: RingSide Creative - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AURORA] - Ransomware Victim: Rechtsanwaltskanzlei Dr[.] Bien - https://www.redpacketsecurity.com/aurora-ransomware-victim-rechtsanwaltskanzlei-dr-bien/
RedPacket Security
[AURORA] - Ransomware Victim: Rechtsanwaltskanzlei Dr[.] Bien - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-109225 - sgl-project - sglang - https://www.redpacketsecurity.com/cve-alert-cve-2026-109225-sgl-project-sglang/
RedPacket Security
CVE Alert: CVE-2026-109225 - sgl-project - sglang - RedPacket Security
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading
CVE Alert: CVE-2026-109226 - sgl-project - sglang - https://www.redpacketsecurity.com/cve-alert-cve-2026-109226-sgl-project-sglang/
RedPacket Security
CVE Alert: CVE-2026-109226 - sgl-project - sglang - RedPacket Security
SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly
[SAFEPAY] - Ransomware Victim: hiqbio[.]com - https://www.redpacketsecurity.com/safepay-ransomware-victim-hiqbio-com/
RedPacket Security
[SAFEPAY] - Ransomware Victim: hiqbio[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: AAA Architectural Hardware - https://www.redpacketsecurity.com/akira-ransomware-victim-aaa-architectural-hardware/
RedPacket Security
[AKIRA] - Ransomware Victim: AAA Architectural Hardware - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[OROVA] - Ransomware Victim: Libre Wireless Technologies - https://www.redpacketsecurity.com/orova-ransomware-victim-libre-wireless-technologies/
RedPacket Security
[OROVA] - Ransomware Victim: Libre Wireless Technologies - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[OROVA] - Ransomware Victim: Gatetech Technology - https://www.redpacketsecurity.com/orova-ransomware-victim-gatetech-technology/
RedPacket Security
[OROVA] - Ransomware Victim: Gatetech Technology - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PLAY] - Ransomware Victim: Saddlers Court MFG - https://www.redpacketsecurity.com/play-ransomware-victim-saddlers-court-mfg/
RedPacket Security
[PLAY] - Ransomware Victim: Saddlers Court MFG - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PLAY] - Ransomware Victim: DFK Group - https://www.redpacketsecurity.com/play-ransomware-victim-dfk-group/
RedPacket Security
[PLAY] - Ransomware Victim: DFK Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[OROVA] - Ransomware Victim: Amantya Technologies - https://www.redpacketsecurity.com/orova-ransomware-victim-amantya-technologies/
RedPacket Security
[OROVA] - Ransomware Victim: Amantya Technologies - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PLAY] - Ransomware Victim: Culinary Specialties - https://www.redpacketsecurity.com/play-ransomware-victim-culinary-specialties/
RedPacket Security
[PLAY] - Ransomware Victim: Culinary Specialties - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PLAY] - Ransomware Victim: Advanced Imaging Solutions - https://www.redpacketsecurity.com/play-ransomware-victim-advanced-imaging-solutions/
RedPacket Security
[PLAY] - Ransomware Victim: Advanced Imaging Solutions - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[OROVA] - Ransomware Victim: The Park Lane Hong Kong - https://www.redpacketsecurity.com/orova-ransomware-victim-the-park-lane-hong-kong/
RedPacket Security
[OROVA] - Ransomware Victim: The Park Lane Hong Kong - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Sharecare - 318,185 breached accounts - https://www.redpacketsecurity.com/sharecare-318-185-breached-accounts/
RedPacket Security
Sharecare - 318,185 breached accounts - RedPacket Security
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data
Luna Moth Leaks Reveal How the Ransomware Group Operates - https://www.redpacketsecurity.com/luna-moth-leaks-shed-light-on-ransomware-group-s-inner-workings/
RedPacket Security
Luna Moth Leaks Reveal How the Ransomware Group Operates - RedPacket Security
Files posted to an anonymous onion site called “The Luna Moth Files” in early October 2026 reportedly include internal documents and chat logs belonging to
Palo Alto VPN Vulnerability CVE-2026-0257 Still Targeted by Ransomware Groups - https://www.redpacketsecurity.com/months-old-palo-alto-vpn-vulnerability-remains-a-target-for-ransomware-groups/
RedPacket Security
Palo Alto VPN Vulnerability CVE-2026-0257 Still Targeted by Ransomware Groups - RedPacket Security
The Palo Alto VPN vulnerability CVE-2026-0257 remains a target for ransomware groups, even though a security patch has been available for months. ReliaQuest
ShinyHunters Arrest: FBI Takes Canadian Cybersecurity Executive Into Custody - https://www.redpacketsecurity.com/net-closes-around-shinyhunters-with-another-fbi-arrest/
RedPacket Security
ShinyHunters Arrest: FBI Takes Canadian Cybersecurity Executive Into Custody - RedPacket Security
FBI Director Kash Patel confirmed the arrest on X on October 9 but did not identify the person in custody.