RedPick @redpickai

Metabase's write-up of the chain: metabase.com/blog/vulnerabi… GreyNoise on the October rise: greynoise.io/resources/at-t…

Metabase CVE-2026-72898: the password reset schema didn't reject extra keys, a refactor passed the whole body down, and the query builder ran a {"raw": ...} value as SQL. Unauth admin. Attacking IPs tripled from Oct 11. Patch, then rotate the DB credentials Metabase holds.

From authorization to retest, the full walkthrough: redpick.ai/blog/mcp-ai-ag…

Our MCP server is now in early access. Any MCP-compatible agent can run a real RedPick pentest end to end: check the target is authorized, launch, watch it live, stop it, read exploit-verified findings, request a retest. Every agent launch lands in the audit trail. #AIsecurity

Full report: tailworm.com Tailscale's response so far: thehackernews.com/2026/10/unpatc…

Tailworm: 11 unpatched findings in Tailscale and headscale, no CVE yet. The worst needs one approved device plus an SSH rule, then socket forwarding done as root gives root on the target. Lateral movement, not internet RCE. Scope SSH grants per host pair and use Tailnet Lock.

How we verify findings: redpick.ai

The PHP2Shell bounty box got popped. Yesterday parts of the timeline called CVE-2026-109618/109619 overhyped since nobody had cashed out. Hard to exploit is not safe. Severity and exploitability are separate questions. RedPick answers the second with a working exploit. #PHP

LiveOverflow 🔴 hextree.io @LiveOverflow

2 days ago

stealmybitcoin was just solved by @killa. Or rather solved a few hours ago. He was confused because the wallet address was wrong. Turns out the server didn't have the right wallet :P

43 48 788 134K 160

Imperva's write-up with the tested Express and body-parser versions: imperva.com/blog/node2shel… Node.js advisory: nodejs.org/en/blog/vulner…

Node2Shell (CVE-2026-111497): Express 5 and body-parser 2 inflate bodies sent with Content-Encoding: br, so any JSON route can feed attacker Brotli to the buggy decoder, as can fetch() on untrusted URLs. Patch to 22.23.4, 24.22.1 or 26.12.1, or set inflate: false for now. #NodeJS

Laravel News write-up of the advisory: laravel-news.com/laravel-token-… More on RedPick: redpick.ai

Laravel's token guard: send a non-string token and on MySQL/MariaDB the lookup can match another user. Fixed Aug 25, disclosed Oct 20, no fix below 12.x. Check auth.php for the "token" driver. RedPick attacks auth from the outside and backs every finding with a working exploit.

Laravel News @laravelnews

a week ago

Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 posted by @paulredmond laravel-news.com/laravel-token-…

1 1 25 4K 9

Microsoft's write-up, with IOCs and hunting queries: microsoft.com/en-us/security…

Storm-0940 ran an agentic pentest framework through ConnectWise's already-consented OAuth apps: Graph recon, new app credentials, a self-assigned Global Admin. Sometimes under 3 hours from target to privileged access. Audit what your vendors' apps can do. #AIsecurity

Christopher Glyer @cglyer

6 days ago

Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Several of these Storm-0940 ARTEX-driven attacks have resulted in the actor

1 20 59 4K 24

@NSACyber RedPick is here to help you test your system using the same AI weapons attacker are using! redpick.ai

Advisory: php.net/index.php#2026… Every RedPick run now checks exposed PHP versions against this advisory from the outside, without firing the exploit in production: redpick.ai

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 are out: two unauth RCEs (CVE-2026-109618/109619), CVSS 4.0 9.2. On mod_php the demonstrated exploit fires before any app code runs. Config tweaks only narrow some paths. Patch, and remember 8.1 and older get no upstream fix. #PHP

PHP RCE pair CVE-2026-109618/109619: watchTowr says PHP 5 through 8, fixes land today at 14:00 UTC. Use the hours before for inventory: base images, appliances, vendored runtimes, old 5.x and 7.x boxes. EOL branches may get no fix, so plan isolation now. #PHP

The Hacker News @TheHackersNews

a week ago

‼️ URGENT ‼️ Two CRITICAL, unpatched PHP flaws (CVSS 9.2 each) have triggered an emergency warning after alleged exploit details surfaced online. Researchers report potential RCE. CVE-2026-109618 and CVE-2026-109619. Fixes scheduled for October 21, 14:00 UTC. Details -

29 193 768 98K 210

Same two open-source apps, four public AI pentest counts: 49, 31, 52, 55. They don't sit on one axis: each has its own testing mode, counting unit and validator. Ours was black-box only, a URL and credentials, no source. Read the columns first: redpick.ai/blog/black-box… #AppSec

Four bugs that each look mild. Chained they become unauth RCE: SSRF into loopback, owner token theft, then an unsigned codec through dlopen. That is Plex2Shell on Media Server before 1.43.3.10861. PoC dropped Oct 16. Honeypots were mining Monero by Oct 17. Patch, then check the Codecs folder for persistence that survives a restart. #AppSec

Nick Percoco @c7five

a week ago

If you run Plex at home, update it today. Exploit code for a four bug chain that gives unauthenticated code execution on Plex Media Server went public two days ago, and attackers were using it on a honeypot within a day to drop a Monero miner. Patched builds have been out since

39 81 837 171K 446