Cybersecurity Blog | Penetration Testing, Website Security & Incident Response | Red Secure Tech

Cybersecurity Insights
& Security Research

Expert analysis, threat intelligence, and practical guidance from Red Secure Tech's security specialists — covering penetration testing, vulnerability assessment, incident response, and secure development for UK businesses.

Windows Hello for Business Key Abuse Enables Token Theft

Entra ID researcher Dirk-jan Mollema has uncovered a technique that allows malware already running on a compromised Windows machine to silently use a victim's Windows Hello for Business key. The attac...

Eng. Donya Bino August 07, 2026

Read Full Article

All Articles 1420 articles — Page 9 of 178

Hacking

Windows Hello for Business Key Abuse Enables Token Theft

Entra ID researcher Dirk-jan Mollema has uncovered a technique that allows malware already running on a compromised Windows machine to silently use a victi...

Eng. Donya Bino
Aug 07, 2026

Read Article

Exploits

Claude Code Gemini CLI Vulnerabilities Expose CI Runners

A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's and Google's own coding-a...

Eng. Donya Bino
Aug 07, 2026

Read Article

Exploits

Cisco SD-WAN IOS XE Vulnerabilities: Critical Patch Released

Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software. The patches are part of a...

Eng. Donya Bino
Aug 07, 2026

Read Article

Exploits

Ill Bloom Wallet Drain Vulnerability Exposes Crypto Funds

A weak random number generator in a popular JavaScript cryptography library has led to the theft of millions of dollars in cryptocurrency. The vulnerabilit...

Eng. Donya Bino
Aug 06, 2026

Read Article

Exploits

iCloud Private Relay IP Leak Exposes User Real Address

Apple's iCloud Private Relay is supposed to protect your privacy. But researchers have found a way to expose your real IP address even when the feature is...

Eng. Donya Bino
Aug 06, 2026

Read Article

Hacking

Oracle Khunt Post-Exploitation Toolkit Runs Inside Database

Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application. Then they installed a post-exploita...

Eng. Donya Bino
Aug 06, 2026

Read Article

Exploits

Linux Kernel OVSwrap Vulnerability Gives Local Users Root

A memory corruption flaw in the Linux kernel's Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distrib...

Eng. Donya Bino
Aug 05, 2026

Read Article

Prompt

AI Prompt Supply Chain: Trust but Verify Third-Party Prompts

You find a great prompt on GitHub. Someone has shared a brilliant way to make your AI agent analyze code, generate documentation, or even write tests. You...

Eng. Donya Bino
Aug 05, 2026

Read Article

Cybersecurity Insights
& Security Research

Editor's Pick

Windows Hello for Business Key Abuse Enables Token Theft

Windows Hello for Business Key Abuse Enables Token Theft

Claude Code Gemini CLI Vulnerabilities Expose CI Runners

Cisco SD-WAN IOS XE Vulnerabilities: Critical Patch Released

Ill Bloom Wallet Drain Vulnerability Exposes Crypto Funds

iCloud Private Relay IP Leak Exposes User Real Address

Oracle Khunt Post-Exploitation Toolkit Runs Inside Database

Linux Kernel OVSwrap Vulnerability Gives Local Users Root

AI Prompt Supply Chain: Trust but Verify Third-Party Prompts

Explore Our Cybersecurity Services

Website Recovery

Penetration Testing

Vulnerability Assessment

Secure Web Development

Red Teaming

Threat Intelligence

Cybersecurity Insights & Security Research

Website Recovery

Penetration Testing

Vulnerability Assessment

Secure Web Development

Red Teaming

Threat Intelligence

Cybersecurity Insights
& Security Research