Over 400 Arch Linux AUR packages were compromised to deliver a credential stealer and Linux rootkit. Another reminder that software supply-chain attacks remain a serious threat to developers and open-source ecosystems. via @bleepingcomputer.com www.bleepingcomputer.com/news/securit...

Here's what we've got coming up this week! #hacking #infosec #cybersecurity

This one goes out to all the fallen VMs 🤘 redsiege.com/vm-music-video #hacking #infosec #cybersecurity

Thanks to Roman Bohuk for leading the WedOff! We had a great conversation about where CTFs stand today and what the growing role of AI could mean for their future. Be sure to check out the new Skillbit Labs (link in comments) We'll see y'all next week! 🔗 redsiege.com/wedoff

🔔 Friendly Neighborhood Reminder 🔔 Tomorrow on The Wednesday Offensive we have Roman Bohuk, CEO - Skillbit (formerly MetaCTF), talking about cybersecurity competitions, including how AI affects competitions and what the future looks like. Join the conversation at 130pm ET 🔗 redsiege.com/wedoff

Security Consultant Ian Briley gives a step-by-step breakdown of how to quickly set up a threat detection lab using Splunk Attack Range 🔗 redsiege.com/threatdetection #hacking #infosec #cybersecurity

In the final episode of the Cloud Pentesting series, Senior Security Consulant Douglas Berdeaux dives deep into the AWS-specific methodologies, workflows, and tooling used during real-world Red Siege assessments. Watch now 🔗 redsiege.com/cp_p4 #hacking #infosec #cybersecurity #cloudsecurity

C0XMO, a new Gafgyt-based botnet variant, exploits a DD-WRT flaw to spread across devices, launch DDoS attacks, and remove rival malware for control of infected systems. via BleepingComputer www.bleepingcomputer.com/news/securit... #hacking #infosec #cybersecurity

OpenAI introduced ChatGPT Lockdown Mode to reduce data leaks from prompt injection attacks by restricting tools and network access, trading some features for stronger security safeguards. via The Hacker News thehackernews.com/2026/06/new-... #hacking #infosec #cybersecurity

Here's what we've got coming up this week! As always: join us for the 2nd Best Show on the Internet, The Wednesday Offensive! This week we have Roman Bohuk, CEO - SkillBit (formerly MetaCTF). Every Wednesday at 130pm ET 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

SecretCon! We've got the swag. We've got the vibes. Stop by the booth and say hi! #hacking #infosec #cybersecurity #secretcon

If you're at SecretCon and happen to spot the life-size version of this person, be sure to wish him a HAPPY BIRTHDAY! 🎂🥳 (if he asks you how you knew, this conversation never happened) #hacking #infosec #cybersecurity #secretcon #weareoffensive

SecretCon has begun, and we're ready to go! Come visit our booth, connect with @timmedin.bsky.social and Justin Connors, and score some offensive swag. #hacking #infosec #cybersecurity #secretcon

Today Victoria Goodwin is back on the WedOff to have a discussion on communication styles and your users/clients - how to be smart and still get your point across in simple terms. See you at 130pm ET 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

Most environments don’t get popped by 0-days. They get popped by basic gaps attackers exploit: weak identity, over-trusted access, weak/reused creds, and limited visibility. Learn real attack breakdowns (and more) from our Security Consultants in the SiegeCast. Watch now 🔗 redsiege.com/siegecast

🔔 Friendly Neighborhood Reminder 🔔 Tomorrow on The Wednesday Offensive we have Victoria Goodwin leading the conversation on communication styles and your users! Join the conversation at 130pm ET 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

The basics got you started. Beyond the Basics helps you get better. Train with our CEO @timmedin.bsky.social at @wildwesthackinfest.bsky.social and sharpen your offensive security skills with hands-on labs and real-world tradecraft. See you in Deadwood 🤠 www.antisyphontraining.com/product/pene...

Attackers are actively exploiting CVE-2026-0257 in Palo Alto PAN-OS GlobalProtect VPNs to bypass authentication and gain access without valid credentials. CISA has added the flaw to its Known Exploited Vulnerabilities catalog. via @darkreading.bsky.social www.darkreading.com/threat-intel...

Nearly 2,000 WordPress sites were infected by malware hidden in Steam profile comments using invisible Unicode characters. Attackers abused the platform for C2, evading detection and maintaining access to compromised sites. via @bleepingcomputer.com www.bleepingcomputer.com/news/securit...

Here's what we've got coming up! The WedOff on Wednesday redsiege.com/wedoff SecretCon on Thursday secretcon.com Quite the fun and offensive week 😎 #hacking #infosec #cybersecurity

In this blog, Security Consultant Stuart Rorer illustrates how penetration testers identify and exploit logic flaws in systems by understanding how they work and finding ways to use them in unintended ways. Read now 🔗 redsiege.com/logicattacks #hacking #infosec #cybersecurity

Forever chasing that 90s hacker movie energy. Hack the planet... responsibly 😎 #hacking #infosec #cybersecurity

In this blog, Red Siege CEO @timmedin.bksy.social breaks down how management teams can turn pentest findings into meaningful security improvements Don’t let your pentest report collect dust. Read now to turn findings into action. 🔗

A new edition of the SiegeStack is dropping soon. Your monthly collection of all things offensive, threat trends, insights, and Red Siege updates — delivered straight to your inbox. Subscribe now and stay ahead of the latest in cybersecurity 🔗 redsiege.com/signup ️

Thaaaaank youuuu Jordan Johnson! Fantastic discussion about the role of purple teaming in cybersecurity and the challenges organizations face in understanding its true purpose. We'll see y'all next week! Same time. Same channel 🔗 redsiege.com/wedoff

Hello World... It is Wednesday! Time for The Wednesday Offensive. Today we have Jordan Johnson, Red Team Manager - Dean Dorton, leading the conversation with "From TTPs to Telemetry: The Offensive Case for Purple Teaming" See you at 130pm ET 🔗 redsiege.com/wedoff

🔔 Friendly Neighborhood Reminder 🔔 Tomorrow is The Wednesday Offensive! We'll be joined by Jordan Johnson, Red Team Manager - Dean Dorton, presenting "From TTPs to Telemetry: The Offensive Case for Purple Teaming". You don't wanna miss it! Join the conversation at 130pm ET 🔗 redsiege.com/wedoff

CYBR.HAK.CON is tomorrow! If you'll be in attendance, don't miss our CEO @timmedin.bsky.social talking about "Offense for Defense" 10:00am in Collinwood I 🔗 www.cybrhakcon.com?ref=cybrsecm... #hacking #infosec #cybersecurity #cybrhakcon

SiegeCast: Cloud Pentesting Part IV Douglas breaks down how real AWS pentests are conducted at Red Siege — Assumed Breach ops, IAM abuse, S3 enumeration, OSINT, recon, lateral movement, and the tooling behind modern cloud assessments. 🔗 redsiege.com/cp_p4 #hacking #infosec #cybersecurity

Here's what we've got coming up! #hacking #infosec #cybersecurity

Emotionally available. Infrastructure unavailable. Some songs are about lost love. This one’s about losing Virtual Machines and pretending we’re fine. 💔 🔗 redsiege.com/vm-music-video Happy Friday from the Red Siege Squad! #hacking #infosec #cybersecurity #weareoffensive

Pull up a chair, fire up your lab, and get into the SiegeCast! Hours of hands-on cybersecurity education covering offensive tradecraft, detection engineering, defensive strategy, and real-world techniques from the expert Security Consultants at Red Siege. 🔗 redsiege.com/siegecast

Thank you Brandon Colley for speaking on the Wednesday Offensive today! An exceptionally fun and informative discussion about passkeys. Check out his online 'choose your own adventure' passkey guide🔗 lnkd.in/ezfU24Z9 We'll see y'all next week! Same time. Same channel. 🔗 redsiege.com/wedoff

It's time for The Wednesday Offensive! Today we'll be joined by Brandon Colley, Senior Security Consultant at TrustedSec, talking about all things Passkeys and his new 'choose your own adventure' guide to understanding, deploying, and supporting passkeys See you at 130pm ET 🔗 redsiege.com/wedoff

THIS FRIDAY: Learn real-world Kerberos attacks with Tim Medin, creator of Kerberoasting and CEO of Red Siege. Perfect for red teamers, pentesters, defenders, and Active Directory practitioners. 📅 5/22 at 12 PM ET 🎟️ www.antisyphontraining.com/product/work...

TOMORROW! Our very own Senior Security Consultant Corey Overstreet is teaming up with Antisyphon Training to give a FREE 1-hour training "Red Teaming: Bypass, Evade, Exploit" Reserve your spot 🔗 events.zoom.us/ev/Al0Ws5JH0... #hacking #infosec #cybersecurity #training

Linux “DirtyDecrypt” root escalation flaw now has a public PoC exploit, impacting some newer Linux distros using CONFIG_RXGK. Patch ASAP if you’re affected. via @bleepingcomputer.com www.bleepingcomputer.com/news/securit... #hacking #infosec #cybersecurity

Here's what we've got coming up! #hacking #infosec #cybersecurity

In Part IV of the SiegeCast cloud penetration testing series, Douglas Berdeaux dives deep into the AWS-specific methodologies, workflows, and tooling used during real-world Red Siege assessments. Watch now 🔗 www.redsiege.com/cp_p4 #hacking #infosec #cybersecurity #cloudsecurity

We've said it once, we've said it 1000 times, "Document it or it didn't happen!" Beats to keep the vibes up in your process 🔗 youtu.be/TuTrFztciYc?... #hacking #infosec #cybersecurity

A fantastic conversation with Rey Bango, as always. We had a great discussion about how AI tools are rapidly accelerating CVE discovery, along with the opportunities and challenges that come with that shift. See you next time 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

It is Wednesday! You know that means it's time for the 2nd Best Show on the Internet: The Wednesday Offensive! Today we have the great Rey Bango talking about the coming onslaught of CVEs. See you at 130pm ET 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

Our CEO Tim Medin joined Phillip Wylie and Michael Farnum on the latest CYBR.HAK.CAST to break down the evolution of offensive security, the role of penetration testing, and why defenders need to think beyond checklists and start thinking like attackers. www.cybrsecmedia.com/cybr-hak-cas...

Hackers are using malicious Google ads and publicly shared Anthropic Claude[.]ai chats to trick Mac users into running terminal commands that secretly install malware. via Bleeping Computer www.bleepingcomputer.com/news/securit... #hacking #infosec #cybersecurity

Instructure restored service for most users, confirmed hackers exploited vulnerabilities tied to Free-For-Teacher accounts, and investigators linked the breach to the ShinyHunters group. via SecurityWeek www.securityweek.com/canvas-syste... #hacking #infosec #cybersecurity

Here's what we've got coming up! #hacking #infoesc #cybersecurity

Press play. Enumerate responsibly. HACK THE DAY! 🔗 youtu.be/7b8QVF7o24U?... #hacking #infosec #cybersecurity

Wake up, it's Wednesday!!! Time for The Wednesday Offensive! Today we have our very own Security Consultant, Ian Briley, discussing "Are CVEs dead?" How hacking has moved beyond CVE exploits to abusing the interactions between processes and services. See you at 130pm ET 🔗 redsiege.com/wedoff

Don't miss our Senior Security Consultant Corey Overstreet's FREE 1-hour @antisyphontraining.bsky.social Anti-Cast "Red Teaming: Bypass, Evade, and Exploit" on May 20 at 12pm ET Reserve your spot 🔗 events.zoom.us/ev/Al0Ws5JH0... #hacking #infosec #cybersecurity #training

A newly disclosed Linux kernel vulnerability, “Copy Fail”, is already being actively exploited, allowing unprivileged users to gain root access on most Linux systems released since 2017 using a reliable public exploit. via @bleepingcomputer.com www.bleepingcomputer.com/news/securit...