Red Secure Tech LTD

22/09/2026

Modern users expect speed, responsiveness, and seamless experiences, but they also expect their information to be protected.

Security shouldn't be added at the end. It should be engineered into your web application from day one.
Build something that performs and protects.

👉 Build modern and secure:
https://www.redsecuretech.co.uk/service/secure-web-development

22/09/2026

LINUX KVM ARM64 FLAW: GUEST CAN ESCAPE TO HOST

CVE-2026-89775 lets a guest VM read and write host kernel memory, and potentially escape to the host, but only if nested virtualization is enabled, which is off by default.

Read more: https://www.redsecuretech.co.uk/blog/post/linux-kvm-arm64-flaw-allows-guest-to-host-escape/1539

A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine, bu...

22/09/2026

A researcher opens what looks like a Word document. It runs code instead.

That document was a Windows shortcut wearing a document's icon. Windows hid the real extension.

This is ReverseRAT. It has been targeting government and defense since 2021. Now it is going after universities.

Read more:
https://www.redsecuretech.co.uk/blog/post/reverserat-spear-phishing-how-academia-gets-targeted/1538

ReverseRAT - There is an email sitting in a university researcher's inbox right now. It looks like a research proposal, or a conference invitation, or a do...

22/09/2026

INDEXED-BTREE MALICIOUS NPM PACKAGE

A malicious npm package called indexed-btree hid its payload in runtime code, not lifecycle scripts, and it earned the attacker 109 ETH.

Read more: https://www.redsecuretech.co.uk/blog/post/indexed-btree-malicious-npm-package-uses-runtime-code/1537

Malicious npm Package - A malicious npm package called indexed-btree has been caught hiding its payload inside application code, rather than using lifecycl...

22/09/2026

Old phishing sent the same email to ten thousand people. Filters caught it once and blocked it everywhere.

AI sends ten thousand different emails. There is nothing to catch.

Here's how to defend when every lure is unique.
https://www.redsecuretech.co.uk/blog/post/ai-written-lures-when-every-phishing-email-is-unique/1536

AI-Written Lures - For twenty years, email security worked on a simple assumption, if a thousand people received the same malicious email, you only needed...

22/09/2026

META MUSE MAC FLAW: Dictation Goes to Attackers

Patrick Wardle found a macOS flaw in Meta's Muse, malware can redirect your dictation to an attacker, then steal your token, then control Muse on any device.

Read more: https://www.redsecuretech.co.uk/blog/post/meta-muse-macos-flaw-lets-malware-hijack-assistant/1535

Meta Muse macOS - Meta's Muse assistant has a problem on macOS, a security researcher found a way for malware to quietly take it over, and the flaw wasn't...

20/09/2026

A new malware family gets a new name every week. The techniques underneath rarely change.

Track behaviors, not badges. Your detection will survive the rebrand.

Read more: https://www.redsecuretech.co.uk/blog/post/new-malware-families-whats-actually-changing/1534

New Malware Families - Every week brings a headline about a new malware family, a new name, a new logo, a new dashboard on some leak site, and it is easy t...

20/09/2026

Somewhere on your network is a server you forgot about. A database with no password. An admin panel nobody remembers.

Shodan already indexed it. On the day it went live.

You can find it first. Here's how.
https://www.redsecuretech.co.uk/blog/post/how-to-use-shodan-to-find-your-own-exposed-assets/1533

Shodan - Somewhere on your network there is a service you forgot about, a staging server that was never meant to face the internet, a database with no pass...

20/09/2026

Your email is probably in a breach database. So is at least one of your passwords.

Checking takes 30 seconds. And it's free.

Here's how to find out and what to do next.
https://www.redsecuretech.co.uk/blog/post/how-to-check-if-your-email-and-passwords-have-been-leaked/1532

Email and Passwords - You probably already suspect it. Somewhere in the back of your mind, there is a quiet assumption that your email address, and maybe a...

20/09/2026

CLAUDE OPUS 5 USED TO BREACH OPENAI ACCOUNTS

Hacktron researchers used Claude Opus 5 to chain two flaws, take over OpenAI employees' ChatGPT and Codex accounts, and reach an internal code repo.

Read more: https://www.redsecuretech.co.uk/blog/post/claude-opus-5-used-to-breach-openai-accounts/1531

Three researchers at Hacktron just pulled off something wild. They used Anthropic's Claude Opus 5 to take over the ChatGPT and Codex accounts of several Op...