Year: 2025

[PLAY] – Ransomware Victim: Cottage

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[EVEREST] – Ransomware Victim: MUSE-INSECURE: Inside Colins Aerospaces Security Failure

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[EVEREST] – Ransomware Victim: Colins Aerospace / RTX[.]com

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[INCRANSOM] – Ransomware Victim: Shadrix & Parmer, P[.]C[.]

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[RHYSIDA] – Ransomware Victim: Hematology Oncology Consultants

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[COINBASECARTEL] – Ransomware Victim: Desjardin Bank / Group

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[PEAR] – Ransomware Victim: GFF&F – Galine, Frye, Fitting & Frangos, LLP

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[AKIRA] – Ransomware Victim: Manko Window Systems

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[AKIRA] – Ransomware Victim: Tenryu America

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

HackerOne Bug Bounty Disclosure: smtp-command-injection-vulnerability-in-libcurl-via-rfc-suffix-spolu-dust

October 17, 2025

Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:spolu-dustLink to Submitters Profile:https://hackerone.com/spolu-dust Report Title:SMTP Command Injection Vulnerability in libcurl 8160...

[RADAR] – Ransomware Victim: Sold Real Estate, Sold RE PTY LTD

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[RADAR] – Ransomware Victim: UrbanX PTY LTD

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[RADAR] – Ransomware Victim: One Agency Eastlakes

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[DEVMAN] – Ransomware Victim: pharmaciedesalizes[.]fr

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[NOVA] – Ransomware Victim: Alitech

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[AKIRA] – Ransomware Victim: Curtis Steel Co

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[AKIRA] – Ransomware Victim: Plastics Extrusion Machinery

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[AKIRA] – Ransomware Victim: Consolidated Restaurant Operations, Inc[.]

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[RANSOMHOUSE] – Ransomware Victim: WEBER

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[RHYSIDA] – Ransomware Victim: GEIGER

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

[BLACKSHRANTAC] – Ransomware Victim: SK shieldus

October 17, 2025

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal...

CVE Alert: CVE-2025-11899 – Flowring Technology – Agentflow

October 17, 2025

CVE-2025-11899 HIGHNo exploitation known Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers...

CVE Alert: CVE-2025-11898 – Flowring Technology – Agentflow

October 17, 2025

CVE-2025-11898 HIGHNo exploitation known Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit...

Devs Are Writing Vs Code Extensions That Blab Secrets By The Bucketload

October 17, 2025

Developers of VS Code extensions are leaking sensitive secrets left, right and center, according to researchers who worked with Microsoft...

Year: 2025

[PLAY] – Ransomware Victim: Cottage

[EVEREST] – Ransomware Victim: MUSE-INSECURE: Inside Colins Aerospaces Security Failure

[EVEREST] – Ransomware Victim: Colins Aerospace / RTX[.]com

[INCRANSOM] – Ransomware Victim: Shadrix & Parmer, P[.]C[.]

[RHYSIDA] – Ransomware Victim: Hematology Oncology Consultants

[COINBASECARTEL] – Ransomware Victim: Desjardin Bank / Group

[PEAR] – Ransomware Victim: GFF&F – Galine, Frye, Fitting & Frangos, LLP

[AKIRA] – Ransomware Victim: Manko Window Systems

[AKIRA] – Ransomware Victim: Tenryu America

HackerOne Bug Bounty Disclosure: smtp-command-injection-vulnerability-in-libcurl-via-rfc-suffix-spolu-dust

[RADAR] – Ransomware Victim: Sold Real Estate, Sold RE PTY LTD

[RADAR] – Ransomware Victim: UrbanX PTY LTD

[RADAR] – Ransomware Victim: One Agency Eastlakes

[DEVMAN] – Ransomware Victim: pharmaciedesalizes[.]fr

[NOVA] – Ransomware Victim: Alitech

[AKIRA] – Ransomware Victim: Curtis Steel Co

[AKIRA] – Ransomware Victim: Plastics Extrusion Machinery

[AKIRA] – Ransomware Victim: Consolidated Restaurant Operations, Inc[.]

[RANSOMHOUSE] – Ransomware Victim: WEBER

[RHYSIDA] – Ransomware Victim: GEIGER

[BLACKSHRANTAC] – Ransomware Victim: SK shieldus

CVE Alert: CVE-2025-11899 – Flowring Technology – Agentflow

CVE Alert: CVE-2025-11898 – Flowring Technology – Agentflow

Devs Are Writing Vs Code Extensions That Blab Secrets By The Bucketload

CVE Alert: CVE-2025-11145 – CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. – enVision

Cobalt Strike Beacon Detected – 47[.]236[.]110[.]95:10443

Cobalt Strike Beacon Detected – 8[.]136[.]50[.]233:10443

Cobalt Strike Beacon Detected – 103[.]171[.]35[.]66:6443

Cobalt Strike Beacon Detected – 119[.]45[.]29[.]172:8089

You may have missed