#red

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Sep 14, 2026 // 20:01

A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise […]

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

Aug 26, 2026 // 16:10

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results of two red team assessments it conducted simultaneously against two critical infrastructure organizations, […]

Your First GRC Agent: A Red Teamer’s Walkthrough

Jun 26, 2026 // 17:16

By Maril Vernon, GRC Engineering Evangelist, Anecdotes. Every vendor on every panel right now is saying the word “agentic.” But most of them can’t explain […]

Red Hat npm packages compromised to steal developer credentials

Jun 2, 2026 // 00:56

More than 30 npm packages under Red Hat’s ‘@redhat-cloud-services’ namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, […]

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Jun 1, 2026 // 22:14

A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a […]

Your Purple Team Isn’t Purple — It’s Just Red and Blue in the Same Room

May 11, 2026 // 14:32

Defending a network at 2 am looks a lot like this: an analyst copy-pasting a hash from a PDF into a SIEM query. A red […]

Operation Red Card 2.0: 651 Arrested as Interpol Dismantles African Fraud Rings

Feb 21, 2026 // 12:27

In a major international crackdown coordinated by INTERPOL, law enforcement across 16 African countries arrested 651 suspects and recovered $4.3 million in illicit funds. The sting, known as Operation Red Card […]