Home

Red Sky® Alliance has been serving information security professionals for over twelve years. We invite businesses and organizations, from enterprises to small businesses, to learn more about cyber threats and how to avoid them. We provide TLP White and Green cyber threat reporting for targeted industry segments, international reports, and malware/bot analyses.

A privately held USA-owned cyber threat intelligence firm that delivers proprietary cyber threat intelligence datasets and services. Our company provides insightful, actionable intelligence in formats best suited to your strategic, operational, and tactical needs.

 

Let us better prepare you and your team for new cyber threats.

Redskyalliance.org offers free access to all, and no salesperson will call.

You Can’t Dunk NovaCookies in Milk

31266419499?profile=RESIZE_180x180 Security researchers have uncovered NovaCookies, a phishing-as-a-service platform that helps criminals steal Microsoft 365 authentication sessions in real time.  The platform gives attackers infrastructure that relays a genuine Microsoft sign-in page through attacker-controlled systems.  Victims are directed to what appears to be a legitimate login process, allowing the service to…

Read more…

After Hacking Mistakes

31255876078?profile=RESIZE_400x Getting hacked has a way of making people panic first and think clearly second.  That's understandable, because the moment you realize someone may have gotten into your email, social account, or bank login, your brain tends to jump straight to damage control.  In that rush, many people focus on the most obvious fix and assume the crisis is basically over once they do it.

The…

Read more…

T-Mobile Severs Network Cable to Expel Hackers

31255892685?profile=RESIZE_180x180 Cybersecurity staff at US phone provider T-Mobile identified and expelled Chinese hackers from its network in 2024 during a spate of industry-wide hacks by Beijing to steal customer data, and Bloomberg has now published a report on the event.   T-Mobile’s security team resorted to an unusually low-tech fix for a high-tech problem in 2024, physically severing a network cable to cut…

Read more…

Multi-Functional Linux – Evooo1Bot

31255879654?profile=RESIZE_400x Researchers have been tracking a previously undocumented Linux botnet family, which we have named Evooo1Bot.  The name derives from the hardcoded string “evooo1” found in every binary.  While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including encrypted C2 communications, an SSH…

Read more…

Patches via AI

31255420263?profile=RESIZE_400x This month’s patch bundle obliterates the software giant’s previous record set in July, when it released updates for at least 570 security vulnerabilities.  September’s Patch on 8 September 2026 brings the 2026 total to more than 2,600, more than twice Microsoft’s previous record-setting patch year in 2020 (1,245) and with three more months to go.[1]

There…

Read more…

A Lesson in AI

31241680677?profile=RESIZE_400x How to explain agentic AI to your leadership team, from Ashley Nicholson[1]:

It's not one, single tool.  It's layers of capability.

Here are 5 levels that will determine who wins in 2026:

  1. Machine Learning:
  • Turns data into decisions.
  • Forecasts sales, detects fraud, and can predict churn.
  • It can…
Read more…

LLMjacking

31255383088?profile=RESIZE_400x Generative AI is quickly becoming one of the more lucrative uses for stolen cloud credentials.  Attackers no longer need to set up crypto miners or exfiltrate data to cash in on a leaked IAM key.  They can instead subscribe to foundation models through AWS Marketplace and resell inference access, a technique called …

Read more…

21st Century Mercenaries

31242336689?profile=RESIZE_400x US President Trump has signed a landmark national security presidential memorandum that fundamentally alters the American approach to digital warfare.  This directive authorizes federal law enforcement agencies to partner with vetted private technology firms to execute offensive cyber operations against foreign criminal organizations and international adversaries.  Under this new…

Read more…

In the News

REDSHORT Webinars

Please Join our REDSHORT webinars. 'RED' as something important from Red Sky Alliance, and 'SHORT' in 10 minutes or less weekly. We will cover highlights of trending topics.

REGISTER HERE

Cyber Security Blog

You need to be a member of Red Sky Alliance to add comments!

Comments are closed.

Comments

This reply was deleted.

Red Sky Alliance

For more information about Red Sky Alliance, follow the link, ABOUT