Red Team News @RedTeamNewsBlog

Co-op's cyberattack shows how devastating social engineering can be. A simple impersonation led to £206M in lost sales and a data breach affecting 6.5M members. A stark reminder that people are the first line of defense. redteamnews.com/threat-intelli…

Rust developers alert: Malicious crates "faster_log" and "async_println" were found stealing crypto private keys from source code. The packages have been removed, but check your dependencies and rotate any exposed keys. redteamnews.com/threat-intelli…

Passkeys are replacing passwords, with Microsoft seeing a 98% login success rate. They use crypto keys on your device to stop phishing and credential stuffing. A major security upgrade, but adoption has hurdles. redteamnews.com/blue-team/pass…

Big news for Windows 10 users in Europe! Microsoft is now providing a free, extra year of security updates without requiring you to enable Windows Backup. A win for consumer advocacy. redteamnews.com/blue-team/micr…

New Supermicro BMC vulnerabilities let attackers install persistent backdoors, surviving OS reinstalls. Incomplete patches from earlier this year are to blame. Check your server firmware now. redteamnews.com/red-team/cve/s…

New OnePlus vulnerability lets any app read your SMS messages without permission. This unpatched flaw is a major privacy risk. Be cautious with app downloads until a fix is released. redteamnews.com/red-team/cve/o…

New "Obscura" ransomware targets domain controllers. This Go-based malware uses strong encryption and double extortion. Huntress Labs analysis shows it's a developing threat. Key IOCs and mitigation tips here: redteamnews.com/blue-team/malw…

For over a year, a stealthy espionage campaign dubbed BrickStorm has been hiding in US corporate networks. The attackers target tech, legal, and SaaS firms, focusing on stealing emails. Mandiant has released a free detection script. #CyberSecurity redteamnews.com/threat-intelli…

iOS 26 vs. Android 16 is more than new looks. It's a security showdown between Apple's curated control and Google's customizable power. Here's what your team needs to know about the new risks. redteamnews.com/news/ios-26-vs…

Major police operation across Europe dismantles a €100 million crypto fraud ring that targeted over 100 investors. A big win for international cooperation against financial crime. redteamnews.com/threat-intelli…

New NPM package "fezbox" uses a clever trick: hiding a cookie-stealing payload inside a QR code image. It's part of a wave of sophisticated supply chain attacks. Stay vigilant with your dependencies. redteamnews.com/blue-team/malw…

New PoC tool "EDR-Freeze" abuses the Windows Error Reporting service to temporarily suspend EDR and antivirus software. This user-mode technique bypasses PPL protection, highlighting a stealthy new evasion method. #CyberSecurity redteamnews.com/red-team/edr-f…

Firefox now lets developers roll back extensions to fix critical bugs quickly. This new feature is a big step for browser security, giving teams a legitimate way to respond to issues without risky workarounds. redteamnews.com/news/firefox-e…

Phishing isn't just an email problem anymore. Attackers are now hitting us on social media, SMS, and chat apps, bypassing old defenses. It's time for a security rethink. Learn more: redteamnews.com/threat-intelli…

Trump confirms Murdochs, Ellison, and Dell are part of a US-led group to acquire TikTok. The deal aims to put American patriots in control of US data and avoid a ban. redteamnews.com/news/murdoch-f…

The Google antitrust case could lead to a historic breakup, creating major security challenges as they untangle their infrastructure. A must-read for tech and security pros. redteamnews.com/cyber-laws-reg…

Apple says EU regulations are delaying new features for European users as the company faces DMA compliance challenges and significant fines. The dispute is reshaping how tech platforms operate globally. redteamnews.com/cyber-laws-reg…

Critical Microsoft Entra ID flaw could have let attackers hijack any organization's cloud tenant. The vulnerability has been patched, but serves as a stark reminder about cloud identity risks. redteamnews.com/red-team/cve/c…

The AI cybersecurity arms race is here. Hackers now use AI for hyper-realistic phishing and malware, but defenders are fighting back with automated protection. Human oversight remains crucial. redteamnews.com/threat-intelli…

New Pentagon policy requires journalists to sign a pledge restricting all unauthorized info gathering, even unclassified material. Critics call it a direct assault on independent journalism. redteamnews.com/cyber-laws-reg…