Pinned Tweet
Join 200+ cybersecurity professionals, developers & business owners in the RST Forum. Discuss real threats, share pen-test techniques & get answers from security specialists.
Free to join: platform.redsecuretech.co.uk…
#CyberSecurity #InfoSec #EthicalHacking #PenTesting #CyberThreats
One morning, you could open your laptop and find everything gone.
Customer data missing, orders inaccessible, your website hacked, and even your backups compromised.
👉 Act before it’s too late: redsecuretech.co.uk/service/…
#CyberSecurity #WebsiteHacked #MalwareRemoval #Incident
Your Instagram gets hacked. You change the password and move on.
But can they get to your bank?
Full breakdown: redsecuretech.co.uk/blog/pos…
#SocialMediaSecurity #AccountTakeover #CyberSecurity #InfoSec #BankFraud
Everyone reviews the request body. Almost nobody reviews the headers.
Yet a single carriage return in the wrong header can end it early, start a new one, and rewrite what the next component believes.
Full breakdown: redsecuretech.co.uk/blog/pos…
#HeaderInjection #CRLFInjection
GhostAction is back, and it's bigger than last time.
500+ GitHub accounts and tens of thousands of repositories since October 7.
Full guide 👉 redsecuretech.co.uk/blog/pos…
#GhostAction #GitHubSecurity #SupplyChainAttack #CyberSecurity #InfoSec #DevSecOps #GitHubActions #AppSec
A full working exploit for AnyDesk Linux is public, It's called AnyPwn.
Pre-authentication root RCE. The attack lands before any approval prompt.
Full breakdown 👉 redsecuretech.co.uk/blog/pos…
#AnyDesk #AnyPwn #RemoteCodeExecution #CyberSecurity #InfoSec #LinuxSecurity
A policy can say you're secure. A Red Team engagement puts that security to the test.
We simulate realistic attacks, identify gaps, test your people and processes, and document what happened.
👉 Build your security story:
redsecuretech.co.uk/service/…
#RedTeaming #CyberSecurity
You download a game to get unlimited coins. It works for a few days.
Then your phone starts behaving strangely, and you realise the mod was the malware.
Full breakdown: redsecuretech.co.uk/blog/pos…
#MobileGaming #GameMalware #MobileSecurity #CyberSecurity #InfoSec
Can a QR code hack your phone?
No. A QR code is just a picture of text.
The danger is where it sends you, and here is how to check before you tap.
Full breakdown: redsecuretech.co.uk/blog/pos…
#QRCodeSecurity #Quishing #CyberSecurity #InfoSec #ScamAlert
If you manage client WordPress sites, this one multiplies by your site count.
CVE-2026-87902. Unauthenticated path traversal in core.
👉 Full breakdown: redsecuretech.co.uk/blog/pos…
#WordPressSecurity #PathTraversal #CyberSecurity #WebSecurity #InfoSec #WPSecurity #SecurityPatch
SuiteCRM has a public SSRF proof of concept. CVE-2026-69137.
The catch everyone's missing: "authenticated" doesn't mean privileged. Any valid user account is enough.
👉 Full breakdown: redsecuretech.co.uk/blog/pos…
#SuiteCRM #SSRF #CyberSecurity #AppSec #InfoSec #WebSecurity
GitLab dropped a critical one. CVE-2026-90970 scores 9.9.
A logged-in user with Duo Agent Platform access can escape the prompt template sandbox and run commands on a self-hosted AI Gateway.
👉 Full breakdown: redsecuretech.co.uk/blog/pos…
#GitLabSecurity #AI #CyberSecurity #InfoSec
A backdoor that calls home through your own mailbox.
No suspicious domain. No unusual server. Just Outlook and OneDrive doing what they always do.
This is Antino.
Full breakdown: redsecuretech.co.uk/blog/pos…
#Antino #Backdoor #UAT11587 #CyberSecurity #InfoSec #ThreatIntelligence
Dell just shipped a security advisory worth reading twice. Six flaws in Container Storage Modules. The worst scores a perfect 10.0.
👉 Full breakdown:
redsecuretech.co.uk/blog/pos…
#DellSecurity #KubernetesSecurity #CSMVulnerabilities #ContainerSecurity #CyberSecurity #DellCSM
You did not click anything. You did not open a file. You did not approve a permission.
And your iPhone is compromised anyway.
Full breakdown: redsecuretech.co.uk/blog/pos…
#iOS #ZeroClick #Spyware #CyberSecurity #InfoSec
OpenAI disrupted a coordinated adversarial distillation campaign that it links to individuals associated with Moonshot AI, involving thousands of accounts and tens of thousands of requests.
Read more: redsecuretech.co.uk/blog/pos…
#OpenAI #MoonshotAI #AI #NationalSecurity
Researchers published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw that a malicious PDF with an embedded font can trigger, crashing unpatched iPhones and Macs.
Read more: redsecuretech.co.uk/blog/pos…
#Apple #CoreGraphics #iOS #macOS #WhatsApp
Microsoft warned that phishing emails are installing legitimate MSP360 RMM software under deceptive file names, then adding ConnectWise ScreenConnect for redundant remote access.
Read more: redsecuretech.co.uk/blog/pos…
#MSP360 #ScreenConnect #RMM #Microsoft #Phishing #InfoSec
You search for software, you click the top result, and it tells you to paste a command to finish the install.
That top result was an ad. That command was malware.
Full breakdown: redsecuretech.co.uk/blog/pos…
#Malvertising #SponsoredResults #CyberSecurity #InfoSec #OnlineSafety
CISCO SD-WAN MANAGER ZERO-DAY UNDER ATTACK
Cisco says attackers are exploiting CVE-2026-76504, a critical flaw that lets a remote attacker use the Manager's API as admin, with no login needed.
Read more: redsecuretech.co.uk/blog/pos…
#Cisco #SDWAN #ZeroDay #InfoSec #ThreatIntel
A malware campaign used to spread for weeks. Defenders wrote signatures, and it died down.
Here is how AI changed malware distribution and what actually helps.
redsecuretech.co.uk/blog/pos…
#AIMalware #MalwareDistribution #CyberSecurity #InfoSec #Phishing





















