Cyber Attacks
OVHcloud CLI Releases Tampered With to Harvest Local Secrets
A hijacked developer account allowed an attacker to swap five OVHcloud command-line tool archives with secret-stealing malware for less than two hours.
Cyber Attacks
Cyber Attacks coverage from RedTeam Log holds 31 articles, 19 of them reference guides. The newest was published on October 20, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include MITRE ATT&CK and CISA: Cyber Threats and Advisories.
Cyber Attacks
GitHub Actions: Stolen Dev Keys Push Fake Scripts to Mine Secrets from Git History
Attackers used stolen developer credentials to push fake security scripts, harvesting secrets from code history and current files.
Cyber Attacks
Video conferencing phishing invitations and how they bypass trust
Calendar invitations sent through legitimate video platforms bypass email filters because they originate from trusted infrastructure providers.
Cyber Attacks
ReverseRAT Malware Uses Windows Shortcuts to Steal Data From Indian Firms
SideCopy hackers deploy ReverseRAT via spear-phishing to steal passwords and screenshots from Indian organisations, including academic institutions.
Cyber Attacks
OpenCode Console breach exposes API keys via distillation attack
Anomaly Innovations reports a large-scale distillation attack affecting a small fraction of OpenCode Console users and their stored credentials.
Cyber Attacks
AI Agent Escapes: Why Human Liability Remains Unclear
As autonomous tools breach containment and access external systems, the question of human accountability remains legally unsettled.
Cyber Attacks
ClickFix and Stolen Cookies Drive Rapid Business Email Compromise
Attackers exploit terminal paste commands and session cookies to bypass multifactor authentication and manipulate inboxes for financial fraud.
Cyber Attacks
RMM Hijacking: Attackers Abuse Trusted Tools to Blend In, Up 277%
Attackers are hijacking remote management tools to bypass security controls, with Huntress data showing a massive year-on-year increase in incidents.
Cyber Attacks
YAM Store phishing kit takedown blocks billion of scam messages
Microsoft and Japan dismantle a marketplace that sold fake accounts and kits, stopping a network that targeted 75,000 organisations with over one billion scam messages.
Cyber Attacks
Callback Phishing Explained: How Voice Bypasses Email Filters
Attackers use voice calls to bypass email security controls, forcing victims to validate their identity through a trusted communication channel.
Cyber Attacks
How SPF Records Work: The Mechanism Behind Email Sender Verification
SPF validates the sending server’s identity, not the sender’s human identity, allowing attackers to spoof display names while passing technical checks.
Cyber Attacks
Social Engineering Red Flags: Spotting Manipulation Before Data Loss
Attackers bypass technical controls by exploiting human psychology, making behavioural cues the only reliable defence against sophisticated deception.
Cyber Attacks
DNS Filtering for Small Businesses: Block Threats Before They Enter
Domain name system filtering stops malware downloads by blocking requests to malicious addresses, reducing the attack surface without scanning every file transferred.
Cyber Attacks
Email Spoofing Prevention Checklist: Stop Forged Messages
Verifying cryptographic signatures blocks most spoofed emails, but organisational culture remains the final defence against social engineering attacks.
Cyber Attacks
Phishing vs Spam: How to Tell the Difference and Stop Threats
Spam is unwanted noise that wastes time, whereas phishing is a targeted attempt to steal credentials, money, or sensitive data through deception.
Cyber Attacks
DDoS Attacks Types: How Floods of Traffic Break Services
Most defenders focus on stopping the traffic, but the real danger is the collateral damage to legitimate users during the mitigation process.
Cyber Attacks
How to Setup DKIM: The Technical Rollout for Email Authentication
Misaligned DKIM keys break silently, allowing attackers to bypass your filters while your internal logs report successful cryptographic verification.
Cyber Attacks
API Abuse Prevention Checklist: Stop Data Leaks and Logic Flaws
Most API failures occur because developers trust client-side input, allowing attackers to manipulate data flow without ever touching the underlying authentication layer.
Cyber Attacks
Ubuntu and Canonical websites offline during sustained DDoS attack
Canonical confirmed that a distributed denial-of-service attack disrupted access to public websites and security information services for over four hours.
Cyber Attacks
GhostProfile macOS Implant Clones Chrome/Firefox Profiles for Hidden Sessions Without Screen Mirroring
A new macOS implant clones Chrome and Firefox profiles to operate hidden browsers using victims' live login sessions without mirroring the screen.
Cyber Attacks
How to Build Security Operations Center: 6 Steps to Launch
Most centers fail because they automate noise before defining what an actual breach looks like, drowning analysts in false positives that mask real threats.
Cyber Attacks
ARTEX AI Abuse in South Korean Financial Breaches Reveals Directory Risks
Attackers used the ARTEX AI tool to target South Korean banks in late 2026, exploiting open directories to steal data, according to researchers.
Cyber Attacks
How Incident Response Teams Contain Digital Breaches
Effective containment relies on isolating network segments rather than shutting down systems, preserving forensic evidence while stopping lateral movement.
Cyber Attacks
Deepfake Scams: Spotting the Hidden Signs Before It Is Too Late
The most dangerous deepfake attacks contain no visual glitches, relying instead on manipulated audio and urgent context to bypass your natural defences.