CVE Alert: CVE-2026-108431 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108431-microsoft-microsoft-365-apps-for-enterprise/
RedPacket Security
CVE Alert: CVE-2026-108431 - Microsoft - Microsoft 365 Apps for Enterprise - RedPacket Security
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE Alert: CVE-2026-108432 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108432-microsoft-microsoft-365-apps-for-enterprise/
RedPacket Security
CVE Alert: CVE-2026-108432 - Microsoft - Microsoft 365 Apps for Enterprise - RedPacket Security
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE Alert: CVE-2026-108433 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108433-microsoft-microsoft-365-apps-for-enterprise/
RedPacket Security
CVE Alert: CVE-2026-108433 - Microsoft - Microsoft 365 Apps for Enterprise - RedPacket Security
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE Alert: CVE-2026-108437 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108437-microsoft-microsoft-365-apps-for-enterprise/
RedPacket Security
CVE Alert: CVE-2026-108437 - Microsoft - Microsoft 365 Apps for Enterprise - RedPacket Security
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE Alert: CVE-2026-108430 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108430-microsoft-microsoft-365-apps-for-enterprise/
RedPacket Security
CVE Alert: CVE-2026-108430 - Microsoft - Microsoft 365 Apps for Enterprise - RedPacket Security
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
[N0N] - Ransomware Victim: Evolution Spine / All Labs - https://www.redpacketsecurity.com/n0n-ransomware-victim-evolution-spine-all-labs/
RedPacket Security
[N0N] - Ransomware Victim: Evolution Spine / All Labs - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: verveba[.]com \ www[.]att[.]com - https://www.redpacketsecurity.com/incransom-ransomware-victim-verveba-com-www-att-com/
RedPacket Security
[INCRANSOM] - Ransomware Victim: verveba[.]com www[.]att[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: fairfeelegalservices[.]com - https://www.redpacketsecurity.com/incransom-ransomware-victim-fairfeelegalservices-com/
RedPacket Security
[INCRANSOM] - Ransomware Victim: fairfeelegalservices[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Yam Store Phishing Network Disrupted After Sending One Billion Messages - https://www.redpacketsecurity.com/microsoft-disrupts-global-yam-store-network-behind-one-billion-phishing-messages/
RedPacket Security
Yam Store Phishing Network Disrupted After Sending One Billion Messages - RedPacket Security
The Yam Store phishing network has been disrupted in a joint effort by Microsoft, industry partners, and law enforcement. Since January 2026, phishing kits
Aoki Infostealer Targets AI Coding Assistant Credentials - https://www.redpacketsecurity.com/new-aoki-infostealer-targets-ai-coding-assistant-credentials/
RedPacket Security
Aoki Infostealer Targets AI Coding Assistant Credentials - RedPacket Security
The Aoki infostealer is expanding beyond browser and wallet data, with newer versions targeting credentials and session files for popular AI coding
ICO Reprimand for Metropolitan Police Over Auror Data Protection Failures - https://www.redpacketsecurity.com/ico-reprimands-met-over-third-party-data-leak/
RedPacket Security
ICO Reprimand for Metropolitan Police Over Auror Data Protection Failures - RedPacket Security
The Information Commissioner’s Office (ICO) investigated the MPS’s use of Auror, a platform for sharing retail crime intelligence that the force used as part
Danfoss Controllers in France Drop 71% After Supermarket Cyber-Attack - https://www.redpacketsecurity.com/france-internet-exposed-danfoss-controllers-drop-71-after-cyber-attack/
RedPacket Security
Danfoss Controllers in France Drop 71% After Supermarket Cyber-Attack - RedPacket Security
Internet-exposed refrigeration controllers in France became much harder to find online after a cyber incident targeting supermarket food supplies.
Cloud Security: Protecting Data, Identities and Services - https://www.redpacketsecurity.com/cloud-security-protecting-data-identities-and-services/
RedPacket Security
Cloud Security: Protecting Data, Identities and Services - RedPacket Security
Cloud security is the practice of protecting data, identities, applications and infrastructure hosted in cloud environments. It matters because organisations
[N0N] - Ransomware Victim: Company #75 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-75/
RedPacket Security
[N0N] - Ransomware Victim: Company #75 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Company #74 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-74/
RedPacket Security
[N0N] - Ransomware Victim: Company #74 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-111280 - davenardella - snap7 - https://www.redpacketsecurity.com/cve-alert-cve-2026-111280-davenardella-snap7/
RedPacket Security
CVE Alert: CVE-2026-111280 - davenardella - snap7 - RedPacket Security
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers
CVE Alert: CVE-2026-111277 - nivocart - nivocart - https://www.redpacketsecurity.com/cve-alert-cve-2026-111277-nivocart-nivocart/
RedPacket Security
CVE Alert: CVE-2026-111277 - nivocart - nivocart - RedPacket Security
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to
CVE Alert: CVE-2026-111282 - driftregion - iso14229 - https://www.redpacketsecurity.com/cve-alert-cve-2026-111282-driftregion-iso14229/
RedPacket Security
CVE Alert: CVE-2026-111282 - driftregion - iso14229 - RedPacket Security
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path
CVE Alert: CVE-2026-111279 - dragonflydb - dragonfly - https://www.redpacketsecurity.com/cve-alert-cve-2026-111279-dragonflydb-dragonfly/
RedPacket Security
CVE Alert: CVE-2026-111279 - dragonflydb - dragonfly - RedPacket Security
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative
CVE Alert: CVE-2026-111312 - OpenHealthForAll - OpenHealth - https://www.redpacketsecurity.com/cve-alert-cve-2026-111312-openhealthforall-openhealth/
RedPacket Security
CVE Alert: CVE-2026-111312 - OpenHealthForAll - OpenHealth - RedPacket Security
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/ GET, PATCH and DELETE handlers that query
CVE Alert: CVE-2026-111356 - magicblack - MacCMS - https://www.redpacketsecurity.com/cve-alert-cve-2026-111356-magicblack-maccms/
RedPacket Security
CVE Alert: CVE-2026-111356 - magicblack - MacCMS - RedPacket Security
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member