Home

Red Sky® Alliance has been serving information security professionals for over twelve years. We invite businesses and organizations, from enterprises to small businesses, to learn more about cyber threats and how to avoid them. We provide TLP White and Green cyber threat reporting for targeted industry segments, international reports, and malware/bot analyses.

A privately held USA-owned cyber threat intelligence firm that delivers proprietary cyber threat intelligence datasets and services. Our company provides insightful, actionable intelligence in formats best suited to your strategic, operational, and tactical needs.

 

Let us better prepare you and your team for new cyber threats.

Redskyalliance.org offers free access to all, and no salesperson will call.

T-Mobile Severs Network Cable to Expel Hackers

31255892685?profile=RESIZE_180x180 Cybersecurity staff at US phone provider T-Mobile identified and expelled Chinese hackers from its network in 2024 during a spate of industry-wide hacks by Beijing to steal customer data, and Bloomberg has now published a report on the event.   T-Mobile’s security team resorted to an unusually low-tech fix for a high-tech problem in 2024, physically severing a network cable to cut…

Read more…

Multi-Functional Linux – Evooo1Bot

31255879654?profile=RESIZE_400x Researchers have been tracking a previously undocumented Linux botnet family, which we have named Evooo1Bot.  The name derives from the hardcoded string “evooo1” found in every binary.  While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including encrypted C2 communications, an SSH…

Read more…

Patches via AI

31255420263?profile=RESIZE_400x This month’s patch bundle obliterates the software giant’s previous record set in July, when it released updates for at least 570 security vulnerabilities.  September’s Patch on 8 September 2026 brings the 2026 total to more than 2,600, more than twice Microsoft’s previous record-setting patch year in 2020 (1,245) and with three more months to go.[1]

There…

Read more…

A Lesson in AI

31241680677?profile=RESIZE_400x How to explain agentic AI to your leadership team, from Ashley Nicholson[1]:

It's not one, single tool.  It's layers of capability.

Here are 5 levels that will determine who wins in 2026:

  1. Machine Learning:
  • Turns data into decisions.
  • Forecasts sales, detects fraud, and can predict churn.
  • It can…
Read more…

LLMjacking

31255383088?profile=RESIZE_400x Generative AI is quickly becoming one of the more lucrative uses for stolen cloud credentials.  Attackers no longer need to set up crypto miners or exfiltrate data to cash in on a leaked IAM key.  They can instead subscribe to foundation models through AWS Marketplace and resell inference access, a technique called …

Read more…

21st Century Mercenaries

31242336689?profile=RESIZE_400x US President Trump has signed a landmark national security presidential memorandum that fundamentally alters the American approach to digital warfare.  This directive authorizes federal law enforcement agencies to partner with vetted private technology firms to execute offensive cyber operations against foreign criminal organizations and international adversaries.  Under this new…

Read more…

Mabna Institute

31229963458?profile=RESIZE_400x Mabna Institute is an Iran-based organization alleged by US authorities to have operated a large, coordinated credential-theft and data-exfiltration campaign since at least 2013.  Its principal targets were universities and research institutions, but the victim set also included private companies, government agencies, and international organizations.  US prosecutors allege that the…

Read more…

ToxicPanda

31244160457?profile=RESIZE_400x The zLabs team recently identified an updated variant of ToxicPanda, the Android banking Trojan known to have primarily targeted Europe, that introduces significant enhancements, including a comprehensive command set of 167 remote commands and substantially expands its targets globally.  Among the newly added capabilities is a PIN theft mechanism targeting more than 140 banking…

Read more…

In the News

REDSHORT Webinars

Please Join our REDSHORT webinars. 'RED' as something important from Red Sky Alliance, and 'SHORT' in 10 minutes or less weekly. We will cover highlights of trending topics.

REGISTER HERE

Cyber Security Blog

You need to be a member of Red Sky Alliance to add comments!

Comments are closed.

Comments

This reply was deleted.

Red Sky Alliance

For more information about Red Sky Alliance, follow the link, ABOUT