Red Secure Tech LTD

09/05/2026

The PamDOORa SSH backdoor uses a magic password to bypass authentication and steal every credential typed, here is how it works and how to detect it.

https://www.redsecuretech.co.uk/blog/post/pamdoora-ssh-backdoor-the-magic-password-attack-explained/1169

PamDOORa - You type your SSH password, you press enter, you are logged in, everything seems normal, but someone else just logged in without any password at...

09/05/2026

Three cPanel WHM privilege escalation vulnerabilities (CVE-2026-29201, CVE-2026-29202, CVE-2026-29203) allow file read, code ex*****on, and symlink attacks.

https://www.redsecuretech.co.uk/blog/post/cpanel-whm-privilege-escalation-vulnerabilities-get-patches/1168

cPanel WHM privilege - cPanel has issued security patch for three vulnerabilities within its cPanel/WHM software that may allow attackers to read arbitrary...

09/05/2026

A Google Play fake call history apps scam called CallPhantom tricked 7.3 million users into paying for randomly generated call data.

https://www.redsecuretech.co.uk/blog/post/google-play-fake-call-history-apps-scam-hits-7-million-users/1167

Google Play fake call history - Imagine paying for an app that promises to show you anyone's call history, you enter a phone number, you pay a subscription...

09/05/2026

Your website might be one click away from disaster.
Don’t wait for:
⚠️ Customer data gets stolen
⚠️ Google blacklists the site
⚠️ Revenue disappears from downtime
By then, the damage is already done.

A Basic Website Security Audit gives you expert eyes on your website before attackers find the weaknesses first.
Check your estimated audit cost in seconds:
https://www.redsecuretech.co.uk/website-security-audit-cost-calculator

08/05/2026

A Ghost CMS unauthenticated SQL injection (CVE-2026-26980) allows attackers to dump user credentials and API keys without any login.

https://www.redsecuretech.co.uk/blog/post/ghost-cms-unauthenticated-sql-injection-exposes-admin-data/1166

Ghost CMS - A popular blogging platform has a serious problem, attackers can steal admin passwords and API keys without ever logging in, and the vulnerabil...

08/05/2026

How much would a website security audit cost your business?
Check in seconds with our free calculator:
✅ Site complexity
✅ Login systems
✅ Payments
✅ GDPR/PCI needs

Try it:
https://www.redsecuretech.co.uk/website-security-audit-cost-calculator -calc
What did yours come out as? Drop it in the comments 👇

07/05/2026

The slow drip prompt injection attack steals your data one piece at a time over 30 chat turns, here is how the "30-turn heist" works and how to stop it

https://www.redsecuretech.co.uk/blog/post/slow-drip-prompt-injection-the-30-turn-heist-that-nobody-notices/1163

slow drip - A user starts a chat with your AI assistant, they ask a simple question, "What is the weather today"The assistant answers, everything is normal...

07/05/2026

A new Mirai botnet ADB DDoS attack called xlabs_v1 targets Android devices on port 5555 to build a game-server-crashing army.

https://www.redsecuretech.co.uk/blog/post/mirai-botnet-adb-ddos-attack-recruits-android-tv-boxes/1162

Mirai botnet - Your Android TV box or smart TV could be part of a DDoS army right now. And you would never know.Security researchers at Hunt.io have uncove...

07/05/2026

The ZiChatBot trojan hides in fake chatbots and messaging apps, it steals credentials, takes screenshots, and gives attackers remote access to your PC

https://www.redsecuretech.co.uk/blog/post/zichatbot-trojan-the-malware-that-slides-into-your-dms-and-your-system/1161

On Discord, a friend sent you a file named "ZiChatBot_setup.exe" with a note saying to try it out because it's a great new chatbot app. You trusted your f...

07/05/2026

Your checkout page processes thousands of cards daily.
One skimmer = chargebacks, fines, and lost customers.

We detect skimmers early and harden your payment flows before attackers strike.
Protect your revenue → www.redsecuretech.co.uk
𝘙𝘦𝘥 𝘚𝘦𝘤𝘶𝘳𝘦 𝘛𝘦𝘤𝘩 𝘓𝘵𝘥 (𝘜𝘒)

06/05/2026

A Linux kernel proc readdir use after free (CVE-2025-40271) allows local privilege escalation. Fixed in 5.10.247, 6.1.159, and 6.18-rc6.

https://www.redsecuretech.co.uk/blog/post/linux-kernel-proc-readdir-use-after-free-leads-to-root/1160

Linux kernel proc readdir use after free - A kernel bug that has lurked in Linux for over a decade can turn any local user into root. The flaw sits in how...