https://redteamtribune.com/topic/cyber-attacks/attackers-hijack-staples-and-dell-order/RedTeam Tribuneen2026-10-21T11:15:13ZAttackers Hijack Staples and Dell Order Notifications for Voice Phishinghttps://redteamtribune.com/topic/vulnerabilities/aiohttp-multipart-requests-cause-unbounded-file/RedTeam Tribuneen2026-10-21T09:58:30Zaiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3https://redteamtribune.com/topic/vulnerabilities/eclipse-iofog-websocket-authentication-bypass/RedTeam Tribuneen2026-10-21T08:56:43ZEclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versionshttps://redteamtribune.com/topic/vulnerabilities/argo-cd-jsonnet-flaw-risks-server-crash-and-file/RedTeam Tribuneen2026-10-21T08:24:44ZArgo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0https://redteamtribune.com/topic/vulnerabilities/argo-cd-kustomize-injection-bug-lets-read-only/RedTeam Tribuneen2026-10-21T08:08:18ZArgo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servershttps://redteamtribune.com/topic/vulnerabilities/php-remote-code-execution-flaws-rated-9-2-trigger/RedTeam Tribuneen2026-10-21T06:58:19ZPHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Planhttps://redteamtribune.com/topic/vulnerabilities/openstack-manila-authenticated-cross-project/RedTeam Tribuneen2026-10-21T06:26:45ZOpenStack Manila Authenticated Cross-Project Manipulation of Public Shares in CVE-2026-71195https://redteamtribune.com/topic/cyber-attacks/iq-lvbs-claims-rival-comma-ai-ip-targeted/RedTeam Tribuneen2026-10-21T04:40:21ZIQ.Lvbs Claims Rival Comma.ai IP Targeted NovaSpark Modelhttps://redteamtribune.com/topic/vulnerabilities/duplicator-object-injection-cve-2026-82814-allows/RedTeam Tribuneen2026-10-21T04:40:21ZDuplicator Object Injection CVE-2026-82814 Allows Unauthenticated RCE and File Deletionhttps://redteamtribune.com/topic/vulnerabilities/php-cvss-9-2-vulnerabilities-impact-wordpress/RedTeam Tribuneen2026-10-21T04:29:08ZPHP CVSS 9.2 Vulnerabilities Impact WordPress; Critical Patch Arrives October 21https://redteamtribune.com/topic/vulnerabilities/totolink-x2000r-missing-signature-check-in-boa/RedTeam Tribuneen2026-10-21T04:12:39ZTotolink X2000R Missing Signature Check in boa Update Allows Arbitrary Firmware Installationhttps://redteamtribune.com/topic/vulnerabilities/php-rce-flaws-at-9-2-cvss-severity-prompt/RedTeam Tribuneen2026-10-21T03:21:04ZPHP RCE flaws at 9.2 CVSS severity prompt emergency patches for October 21 after WatchTowr confirms leakshttps://redteamtribune.com/topic/cyber-attacks/deepseek-ai-fingerprinting-risks-prompt-dhs-ban/RedTeam Tribuneen2026-10-20T20:10:14ZDeepSeek AI Fingerprinting Risks Prompt DHS Ban on Federal IT Usehttps://redteamtribune.com/topic/vulnerabilities/apache-tomcat-critical-http-2-async-recycling-bug/RedTeam Tribuneen2026-10-20T19:20:32ZApache Tomcat Critical HTTP/2 Async Recycling Bug Leaks User Data; Patch Nowhttps://redteamtribune.com/topic/cyber-attacks/palo-alto-pan-os-auth-bypass-enables-ransomware/RedTeam Tribuneen2026-10-20T18:38:04ZPalo Alto PAN-OS Auth Bypass Enables Ransomware Access Without MFAhttps://redteamtribune.com/topic/vulnerabilities/froxlor-symlink-vulnerability-enables-root/RedTeam Tribuneen2026-10-20T17:54:24ZFroxlor Symlink Vulnerability Enables Root Privilege Escalation for Authenticated Usershttps://redteamtribune.com/topic/cyber-attacks/google-meet-phishing-fake-domains-steal-2fa-while/RedTeam Tribuneen2026-10-20T08:06:45ZGoogle Meet Phishing: Fake Domains Steal 2FA While Leaking DB Config via Exposed Install Pagehttps://redteamtribune.com/topic/vulnerabilities/siemens-software-center-dll-sideloading-enables/RedTeam Tribuneen2026-10-20T08:00:18ZSiemens Software Center DLL Sideloading Enables ClickFix RAT Deploymenthttps://redteamtribune.com/topic/cyber-attacks/anthropics-claude-code-spotted-1-175-cpu-xmrig/RedTeam Tribuneen2026-10-20T07:24:32ZAnthropic's Claude Code Spotted 1,175% CPU XMRig Miner on Mac via LaunchAgenthttps://redteamtribune.com/topic/cyber-attacks/ftc-119-5b-senior-fraud-toll-hidden-as-investment/RedTeam Tribuneen2026-10-20T05:08:48ZFTC: $119.5B Senior Fraud Toll Hidden as Investment Scams Surge 42%https://redteamtribune.com/topic/vulnerabilities/aiohttp-idle-connection-flaw-exhausts-server/RedTeam Tribuneen2026-10-20T01:57:46Zaiohttp idle connection flaw exhausts server capacity; upgrade to 3.14.4 to mitigate CVE-2026-111064https://redteamtribune.com/topic/vulnerabilities/db-gpt-0-8-2-endpoint-error-grants/RedTeam Tribuneen2026-10-20T01:51:10ZDB-GPT 0.8.2 Endpoint Error Grants Unauthenticated Root Code Executionhttps://redteamtribune.com/topic/vulnerabilities/terra-ai-driven-prototype-pollution-and-ssrf/RedTeam Tribuneen2026-10-20T00:23:26ZTerra: AI-Driven Prototype Pollution and SSRF Patches Fail, Fueling CISA Exploit Lists