Red Dog Security

In recent weeks, several open-source developers have fallen victim to phishing attacks, leading to malware being injected into widely used npm packages—some of which receive over 30 million downloads per week. Toptal Incident: Internal Tools Turned Attack Vectors On July 20, 2025, cybersecurity firm Socket reported the compromise of

Gaming hardware manufacturer Endgame Gear has confirmed that malware was embedded in the official configuration tool for its OP1w 4k v2 mouse, which was hosted on the company’s website between June 26 and July 9, 2025. Discovery and Initial Reports The first signs of trouble emerged on Reddit, where

Microsoft Discloses ‘Sploitlight’ Vulnerability Affecting macOS Microsoft has disclosed details of a now-patched vulnerability in macOS that could have allowed attackers to bypass Apple’s Transparency, Consent, and Control (TCC) protections and steal sensitive user data—including cached Apple Intelligence content. TCC is the security framework in macOS responsible for

More than 200,000 WordPress websites are running a vulnerable version of the Post SMTP plugin, exposing them to the risk of administrator account takeovers. Post SMTP is a widely used email delivery plugin, with over 400,000 active installations. Promoted as a more reliable alternative to WordPress’s default

A critical remote code execution (RCE) vulnerability has been discovered in LG surveillance cameras—but no fix is coming. The flaw, which allows attackers to gain administrative control, affects thousands of devices worldwide and is being actively highlighted by security experts and government agencies. CISA Issues Warning Last week, the

A critical Windows vulnerability affecting dozens of Microsoft products has been patched with help from Positive Technologies’ research team. The flaw—tracked as CVE-2025-47955 and rated 7.8 on the CVSS scale—was discovered by Sergey Bliznyuk, a specialist with the PT SWARM vulnerability research unit. Vulnerability Overview CVE-2025-47955 impacted