Resources

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0.

“When the module loads, it locates the bundled binary, marks it executable, and launches it as a detached background process,” TrendAI, Trend Micro’s

Related resources

12 August 2026

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, […]

6 August 2026

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. […]

16 January 2026

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Cisco on Thursday released security updates for a maximum-severity security flaw impacting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, nearly a month […]

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

Friday Squid Blogging: Neon Flying Squid

Resources

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Related resources

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us