https://redteamlog.com/Bits, bytes and breaking security newsenWed, 21 Oct 2026 16:21:36 +0000https://redteamlog.com/category/vulnerabilities/pillow-cve-2026-112897-leaks-heap-memory-via/https://redteamlog.com/category/vulnerabilities/pillow-cve-2026-112897-leaks-heap-memory-via/Wed, 21 Oct 2026 09:37:36 +0000VulnerabilitiesUninitialised memory in Pillow versions before 13.0.0 is exposed as image pixels when processing specific TIFF files, allowing data disclosure.https://redteamlog.com/category/vulnerabilities/ibm-app-connect-enterprise-critical-cve-2026/https://redteamlog.com/category/vulnerabilities/ibm-app-connect-enterprise-critical-cve-2026/Wed, 21 Oct 2026 07:16:37 +0000VulnerabilitiesA critical flaw in IBM App Connect Enterprise allows remote attackers to steal sensitive information through unrestricted network bindings.https://redteamlog.com/category/vulnerabilities/openstack-manila-cross-project-share-manipulation/https://redteamlog.com/category/vulnerabilities/openstack-manila-cross-project-share-manipulation/Wed, 21 Oct 2026 06:26:45 +0000VulnerabilitiesAuthenticated users can hijack public shares, altering access rules and backing up data without owner permission in vulnerable versions.https://redteamlog.com/category/vulnerabilities/totolink-x2000r-http-update-flaw-lets/https://redteamlog.com/category/vulnerabilities/totolink-x2000r-http-update-flaw-lets/Wed, 21 Oct 2026 04:34:19 +0000VulnerabilitiesA critical flaw in the X2000R router lets anyone with login access replace system software without cryptographic verification.https://redteamlog.com/category/vulnerabilities/totolink-x2000r-mcli-stack-overflow-grants/https://redteamlog.com/category/vulnerabilities/totolink-x2000r-mcli-stack-overflow-grants/Wed, 21 Oct 2026 04:07:58 +0000VulnerabilitiesA critical stack-based buffer overflow in the Mcli feature of this router allows authenticated attackers to run arbitrary code on the device.https://redteamlog.com/category/vulnerabilities/php-rce-flaws-leak-early-teams-urged-to-prep-for/https://redteamlog.com/category/vulnerabilities/php-rce-flaws-leak-early-teams-urged-to-prep-for/Wed, 21 Oct 2026 03:21:04 +0000VulnerabilitiesSecurity teams urge immediate preparation for critical PHP updates after embargoed vulnerability details leak ahead of scheduled release.https://redteamlog.com/category/vulnerabilities/totolink-x2000r-boa-web-server-stack-overflows/https://redteamlog.com/category/vulnerabilities/totolink-x2000r-boa-web-server-stack-overflows/Wed, 21 Oct 2026 01:58:46 +0000VulnerabilitiesAuthenticated attackers can exploit stack overflows in the X2000R router’s boa web server to run arbitrary code on the device.https://redteamlog.com/category/vulnerabilities/totolink-x2000r-pppoe-dns-flaws-grant/https://redteamlog.com/category/vulnerabilities/totolink-x2000r-pppoe-dns-flaws-grant/Wed, 21 Oct 2026 00:46:50 +0000VulnerabilitiesFlaws in firmware allow attackers with login access to run arbitrary code via malformed requests to the PPPoE DNS setup function.https://redteamlog.com/category/vulnerabilities/oracle-ebs-tcf-servlets-vulnerable-to/https://redteamlog.com/category/vulnerabilities/oracle-ebs-tcf-servlets-vulnerable-to/Wed, 21 Oct 2026 00:39:16 +0000VulnerabilitiesHorizon3 researchers found a critical flaw in Oracle EBS TCF servlets that lets attackers run code without credentials.https://redteamlog.com/category/vulnerabilities/apache-tomcat-buffer-under-read-may-leak-data/https://redteamlog.com/category/vulnerabilities/apache-tomcat-buffer-under-read-may-leak-data/Tue, 20 Oct 2026 19:01:11 +0000VulnerabilitiesA flaw in Apache Tomcat could cause response data to bleed into subsequent requests, risking information disclosure for unpatched servers.https://redteamlog.com/category/vulnerabilities/draytek-vigor2960-command-injection-patch/https://redteamlog.com/category/vulnerabilities/draytek-vigor2960-command-injection-patch/Tue, 20 Oct 2026 14:49:59 +0000VulnerabilitiesA critical remote code execution flaw in end-of-support DrayTek routers has been patched, but public exploits remain a risk for unupdated devices.https://redteamlog.com/category/cyber-attacks/ovhcloud-cli-releases-tampered-with-to-harvest/https://redteamlog.com/category/cyber-attacks/ovhcloud-cli-releases-tampered-with-to-harvest/Tue, 20 Oct 2026 10:54:36 +0000Cyber AttacksA hijacked developer account allowed an attacker to swap five OVHcloud command-line tool archives with secret-stealing malware for less than two hours.https://redteamlog.com/category/cyber-attacks/github-actions-stolen-dev-keys-push-fake-scripts/https://redteamlog.com/category/cyber-attacks/github-actions-stolen-dev-keys-push-fake-scripts/Tue, 20 Oct 2026 08:06:45 +0000Cyber AttacksAttackers used stolen developer credentials to push fake security scripts, harvesting secrets from code history and current files.https://redteamlog.com/category/vulnerabilities/eptura-archibus-auth-bypass-and-rce/https://redteamlog.com/category/vulnerabilities/eptura-archibus-auth-bypass-and-rce/Tue, 20 Oct 2026 03:33:46 +0000VulnerabilitiesRapid7 found three vulnerabilities in Eptura Archibus allowing unauthenticated remote code execution and full database access.https://redteamlog.com/category/vulnerabilities/eptura-archibus-critical-upload-bug-permits/https://redteamlog.com/category/vulnerabilities/eptura-archibus-critical-upload-bug-permits/Tue, 20 Oct 2026 02:21:55 +0000VulnerabilitiesAttackers can run server commands via uploaded files in Eptura Archibus versions before the 2025.02 update, exploiting a critical flaw rated 9.6 by NVD.https://redteamlog.com/category/vulnerabilities/letta-rce-flaw-insecure-defaults-in-v0-16-8/https://redteamlog.com/category/vulnerabilities/letta-rce-flaw-insecure-defaults-in-v0-16-8/Tue, 20 Oct 2026 02:11:50 +0000VulnerabilitiesA critical flaw in Letta allows remote attackers to execute code and access databases without credentials due to insecure default settings.https://redteamlog.com/category/vulnerabilities/github-prototype-pollution-and-ssrf-patches/https://redteamlog.com/category/vulnerabilities/github-prototype-pollution-and-ssrf-patches/Tue, 20 Oct 2026 00:46:42 +0000VulnerabilitiesTerra Security reports that nearly 2.3% of GitHub patches are broken within three months in 2026, a significant jump from previous years.https://redteamlog.com/category/vulnerabilities/h3c-magic-nx15-os-command-injection-cve-2026/https://redteamlog.com/category/vulnerabilities/h3c-magic-nx15-os-command-injection-cve-2026/Tue, 20 Oct 2026 00:23:26 +0000VulnerabilitiesA critical OS command injection flaw in H3C Magic NX15 firmware allows remote exploitation, with public exploit code available for use.https://redteamlog.com/category/vulnerabilities/craft-cms-token-flaw-risks-cross-site-data/https://redteamlog.com/category/vulnerabilities/craft-cms-token-flaw-risks-cross-site-data/Mon, 19 Oct 2026 23:31:36 +0000VulnerabilitiesA critical flaw in Craft CMS allows attackers to use valid tokens from one site to alter content on another, affecting versions prior to 5.11.0.https://redteamlog.com/category/vulnerabilities/flycms-critical-cve-2026-112296-hardcoded/https://redteamlog.com/category/vulnerabilities/flycms-critical-cve-2026-112296-hardcoded/Mon, 19 Oct 2026 14:22:27 +0000VulnerabilitiesA critical vulnerability in FlyCms allows unauthenticated users to seize full site control using hardcoded login details and a simple captcha challenge.https://redteamlog.com/category/vulnerabilities/netscaler-rce-cve-2026-88771-unauthenticated/https://redteamlog.com/category/vulnerabilities/netscaler-rce-cve-2026-88771-unauthenticated/Mon, 19 Oct 2026 13:36:11 +0000VulnerabilitiesAttackers exploit a critical flaw in NetScaler ADC and Gateway to execute commands without credentials, prompting urgent global patching efforts.https://redteamlog.com/category/vulnerabilities/broadcom-wps-reassembly-bug-2010-flaw-enables/https://redteamlog.com/category/vulnerabilities/broadcom-wps-reassembly-bug-2010-flaw-enables/Mon, 19 Oct 2026 11:59:14 +0000VulnerabilitiesA legacy vulnerability in Broadcom’s Wi-Fi setup code allows attackers to seize control of routers without passwords, affecting millions of devices.https://redteamlog.com/category/cyber-attacks/video-conferencing-phishing-invitations-and-how/https://redteamlog.com/category/cyber-attacks/video-conferencing-phishing-invitations-and-how/Mon, 19 Oct 2026 05:39:45 +0000Cyber AttacksCalendar invitations sent through legitimate video platforms bypass email filters because they originate from trusted infrastructure providers.https://redteamlog.com/category/threat-intel/dark-web-search-engines-how-indexing-works-and/https://redteamlog.com/category/threat-intel/dark-web-search-engines-how-indexing-works-and/Mon, 19 Oct 2026 05:23:46 +0000Threat IntelligenceDark web search engines index hidden sites by crawling onion links, but missing encryption keys leave most content invisible.https://redteamlog.com/category/threat-intel/cyber-range-training-myths-what-platforms/https://redteamlog.com/category/threat-intel/cyber-range-training-myths-what-platforms/Mon, 19 Oct 2026 04:17:50 +0000Threat IntelligenceCyber ranges isolate network traffic to prevent collateral damage, but they cannot simulate the organisational friction that slows real incident response.https://redteamlog.com/category/vulnerabilities/nextcloud-richdocumentscode-flaw-grants/https://redteamlog.com/category/vulnerabilities/nextcloud-richdocumentscode-flaw-grants/Sun, 18 Oct 2026 05:11:52 +0000VulnerabilitiesAttackers gain system command execution on Nextcloud servers via a flaw in the Collabora app, requiring no login credentials.https://redteamlog.com/category/malware/midnight-blizzard-infrastructure-remains-active/https://redteamlog.com/category/malware/midnight-blizzard-infrastructure-remains-active/Sun, 18 Oct 2026 04:55:43 +0000Malware & RansomwareAnalysis confirms servers linked to Storm-2945 continue delivering malicious payloads long after initial security reports, challenging assumptions about threat actor downtime.https://redteamlog.com/category/cyber-attacks/reverserat-malware-uses-windows-shortcuts-to/https://redteamlog.com/category/cyber-attacks/reverserat-malware-uses-windows-shortcuts-to/Sun, 18 Oct 2026 04:44:35 +0000Cyber AttacksSideCopy hackers deploy ReverseRAT via spear-phishing to steal passwords and screenshots from Indian organisations, including academic institutions.https://redteamlog.com/category/vulnerabilities/elex-helpdesk-plugin-permits-remote-code/https://redteamlog.com/category/vulnerabilities/elex-helpdesk-plugin-permits-remote-code/Sun, 18 Oct 2026 02:53:33 +0000VulnerabilitiesUnauthenticated attackers can run arbitrary code on WordPress sites using the ELEX HelpDesk plugin, rated CVSS 9.8 by the NVD.https://redteamlog.com/category/vulnerabilities/tektronix-3-series-mdo-os-command-injection/https://redteamlog.com/category/vulnerabilities/tektronix-3-series-mdo-os-command-injection/Sun, 18 Oct 2026 00:35:27 +0000VulnerabilitiesRemote attackers can execute system commands on affected oscilloscopes, demanding urgent firmware checks for managed lab environments.https://redteamlog.com/category/cyber-attacks/opencode-console-breach-exposes-api-keys-via/https://redteamlog.com/category/cyber-attacks/opencode-console-breach-exposes-api-keys-via/Sat, 17 Oct 2026 22:59:31 +0000Cyber AttacksAnomaly Innovations reports a large-scale distillation attack affecting a small fraction of OpenCode Console users and their stored credentials.https://redteamlog.com/category/vulnerabilities/aws-tough-and-tuftool-flaws-allow-repository/https://redteamlog.com/category/vulnerabilities/aws-tough-and-tuftool-flaws-allow-repository/Sat, 17 Oct 2026 22:32:42 +0000VulnerabilitiesAttackers can compromise TUF metadata integrity using unpatched versions of AWS’s tough library and tuftool utility, requiring immediate upgrades.https://redteamlog.com/category/vulnerabilities/stack-overflow-for-agents-chatgpt-plugin-sparks/https://redteamlog.com/category/vulnerabilities/stack-overflow-for-agents-chatgpt-plugin-sparks/Sat, 17 Oct 2026 21:44:02 +0000VulnerabilitiesOpenAI reports that its new ChatGPT plugin for Stack Overflow for Agents has significantly increased developer signups and agent creation rates.https://redteamlog.com/category/vulnerabilities/kin-openapi-flaw-allows-remote-crash-via/https://redteamlog.com/category/vulnerabilities/kin-openapi-flaw-allows-remote-crash-via/Sat, 17 Oct 2026 19:00:05 +0000VulnerabilitiesA high-severity nil pointer panic in kin-openapi lets attackers disrupt Go services by supplying specific OpenAPI documents that bypass initial validation checks.https://redteamlog.com/category/malware/ghostbat-android-malware-abuses-accessibility/https://redteamlog.com/category/malware/ghostbat-android-malware-abuses-accessibility/Sat, 17 Oct 2026 18:13:14 +0000Malware & RansomwareA new variant of GhostBat malware targets 60 Indian financial apps, using accessibility features to capture PINs directly from legitimate interfaces.https://redteamlog.com/category/vulnerabilities/misaka-danmu-server-authentication-bypass-grants/https://redteamlog.com/category/vulnerabilities/misaka-danmu-server-authentication-bypass-grants/Sat, 17 Oct 2026 16:45:22 +0000VulnerabilitiesUnauthenticated users can manipulate configuration keys to assume administrator privileges in Misaka Danmu Server versions up to 2.8.9.https://redteamlog.com/category/vulnerabilities/claude-agent-sdk-input-sanitization-failure/https://redteamlog.com/category/vulnerabilities/claude-agent-sdk-input-sanitization-failure/Sat, 17 Oct 2026 16:28:44 +0000VulnerabilitiesUnvalidated inputs in the Claude Agent SDK for Python enable arbitrary command execution, bypassing permission controls before version 0.2.121.https://redteamlog.com/category/vulnerabilities/riot-os-atwinc15x0-memory-corruption-nearby/https://redteamlog.com/category/vulnerabilities/riot-os-atwinc15x0-memory-corruption-nearby/Fri, 16 Oct 2026 17:25:46 +0000VulnerabilitiesA critical flaw in the ATWINC15x0 driver allows nearby attackers to corrupt memory and execute code via malformed network names.https://redteamlog.com/category/vulnerabilities/openbsd-kernel-flaw-chain-grants-root-access-via/https://redteamlog.com/category/vulnerabilities/openbsd-kernel-flaw-chain-grants-root-access-via/Fri, 16 Oct 2026 15:31:31 +0000VulnerabilitiesResearchers demonstrated how chaining two kernel defects allows local users to seize root privileges on OpenBSD systems.https://redteamlog.com/category/cyber-attacks/ai-agent-escapes-why-human-liability-remains/https://redteamlog.com/category/cyber-attacks/ai-agent-escapes-why-human-liability-remains/Fri, 16 Oct 2026 12:48:38 +0000Cyber AttacksAs autonomous tools breach containment and access external systems, the question of human accountability remains legally unsettled.