Home

Red Sky® Alliance has been serving information security professionals for over twelve years. We invite businesses and organizations, from enterprises to small businesses, to learn more about cyber threats and how to avoid them. We provide TLP White and Green cyber threat reporting for targeted industry segments, international reports, and malware/bot analyses.

A privately held USA-owned cyber threat intelligence firm that delivers proprietary cyber threat intelligence datasets and services. Our company provides insightful, actionable intelligence in formats best suited to your strategic, operational, and tactical needs.

Let us better prepare you and your team for new cyber threats.

Redskyalliance.org offers free access to all, and no salesperson will call.

North Korea IT Workers (ITWs

Posted by Bill Schenkelberg on October 15, 2026 at 12:00pm

The Democratic People's Republic of Korea (North Korea) continues to improve its tactics to infiltrate western companies with thousands of state-controlled remote "IT Workers" (ITWs) while avoiding detection. ITWs are increasingly using facilitators to counter improved private sector detections and law enforcement actions. The FBI has observed North Korean ITWs use stolen identities,…

ClickFix and Shai-Hulud npm Attacks

Posted by CyberDog on October 15, 2026 at 8:00am

Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins, and blockchain ClickFix tactics to steal access and spread malware.[1]

Cybercriminals increasingly abuse legitimate business tools to access organizations, steal credentials, and spread malware, rather than relying only on software…

MI5 Warns of Spies

Posted by Jim McKee on October 14, 2026 at 12:00pm

Britain's domestic spy agency, MI5, has issued an unprecedented public warning to British universities regarding a sophisticated espionage operation orchestrated by China's intelligence service. MI5 has formally identified the China General Technology Research Institute (CGTRI), also known as the China Academy of General Technology (CAGT), as a front organization for the Chinese…

AI and the Philadelphia Police

Posted by Bill Schenkelberg on October 14, 2026 at 8:05am

Philadelphia police said a "false homicide tip" submitted through the PhillyUnsolvedMurders.com website was generated by an Anthropic artificial intelligence model. The AI giant later confirmed the incident in a report, published last week. The AI submission came through an online platform launched by the Philadelphia Police Department to gather tips about open homicide…

CCP-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

Posted by Bill Schenkelberg on October 13, 2026 at 12:05pm

Last week, the DHS Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), National Security Agency (NSA), and international partners issued a joint Cybersecurity Advisory warning[1] that Integrity Technology Group (Integrity Tech), a China-based cybersecurity company, is enabling threat actors to target multiple critical…

Cyber Security Teams Stretched to the Breaking Point

Posted by Jim McKee on October 13, 2026 at 8:00am

Cyberattacks are rising, but the teams defending against them aren't growing fast enough, pushing cybersecurity professionals to the breaking point, according to new research from the Information Systems Security Association (ISACA). ISACA's State of Privacy 2026 report found that professionals feel increasingly strained, with 65% saying their roles are far more stressful now than…

ZeroTokens Phishing Campaign Targets Banks

Posted by Jim McKee on October 12, 2026 at 12:00pm

Abnormal AI has released a comprehensive report detailing the ZeroTokens platform, a sophisticated live-operator phishing infrastructure that has evolved significantly since its initial disclosure in August 2026. The expanded investigation reveals the scope of operations, resilience, and technical sophistication, showing how threat actors have systematically targeted financial…

BEC in South Africa

Posted by Bill Schenkelberg on October 12, 2026 at 7:55am

Business email compromise (BEC) has become the most common type of cyber-attack affecting South African organizations. Most local companies have either suffered such an attack or received messages from compromised accounts amid an unprecedented surge in incidents.[1]

Interpol’s Cyberthreat Assessment Report 2026 stated that 70% of BEC detections in Africa…

MITRE ATT&CK

The MITRE ATT&CK detection library is a publicly available collection of detection guidance mapped to adversary behaviors in the MITRE ATT&CK framework. It helps security teams design and organize detections for attacker techniques such as credential dumping, PowerShell abuse, persistence, and data exfiltration.

REDXRAY

In the News

REDSHORT Webinars

Please Join our REDSHORT webinars. 'RED' as something important from Red Sky Alliance, and 'SHORT' in 10 minutes or less weekly. We will cover highlights of trending topics.

REGISTER HERE

Cyber Security Blog

You need to be a member of Red Sky Alliance to add comments!

Comments are closed.

Comments

Bill Schenkelberg October 15, 2026 at 8:53am

https://maritime-executive.com/article/massive-cyber-attack-threate...

Massive Cyber Attack Threatens Release of Data from 38 Maritime Companies

Cybersecurity firms are alerting the maritime community to what appears to be a massive data breach possibly exposing 38 organizations ranging from s…
Bill Schenkelberg October 14, 2026 at 9:09am

https://www.lbc.co.uk/article/uk-germany-security-partnership-5Hjdj...

UK and Germany joining forces to fight sabotage, hybrid threats, and cyber attacks | LBC

The joint partnership will involve sharing information and co-ordinating action to monitor, deter and disrupt threats and to develop resilience again…
Bill Schenkelberg October 13, 2026 at 7:49am

https://www.computerweekly.com/news/366651624/Cyber-insurers-in-Asi...

Cyber insurers in Asia step up security services as market softens | Computer Weekly

Zurich Insurance is using its claims data to show organisations in Asia the potential cost of a supplier breach or cloud outage, as brokers push insu…
Bill Schenkelberg October 12, 2026 at 3:44pm

https://www.infosecurity-magazine.com/news/french-supermarket-chains/

Major French Supermarket Chains Hit by Cyber-Attack

The CEO of Cooperative U confirmed a cyber-attack affected the food stock in several stores from October 11
Bill Schenkelberg October 10, 2026 at 6:30pm

https://bioengineer.org/hybrid-ai-model-spots-never-before-seen-cyb...

Hybrid AI model spots never-before-seen cyber attacks and explains its calls

Researchers have developed ZD-HybridNet, a hybrid Transformer-LSTM deep learning framework that detects attack categories withheld from training and…
Bill Schenkelberg October 9, 2026 at 10:51am

https://www.christianpost.com/books/ex-muslim-convert-sounds-warnin...

Ex-Muslim convert sounds warning on AI: We are being diminished' | Living

A former Muslim warns that artificial intelligence is echoing one of Scripture’s oldest warnings about human nature.
Bill Schenkelberg October 7, 2026 at 8:33am

https://bioengineer.org/hybrid-ai-model-spots-never-before-seen-cyb...

Hybrid AI model spots never-before-seen cyber attacks and explains its calls

Researchers have developed ZD-HybridNet, a hybrid Transformer-LSTM deep learning framework that detects attack categories withheld from training and…
Bill Schenkelberg October 6, 2026 at 5:51am

https://techxplore.com/news/2026-10-cloud-plays-crucial-role-abilit...

Cloud computing system design plays crucial role in ability to withstand cyber attacks

The way cloud computing systems are designed and built is just as important in defending against cyberattacks as the security measures and safeguards…
Bill Schenkelberg October 5, 2026 at 9:07am

https://www.pokernews.com/news/2026/09/online-poker-scandal-stateme...

Third-Party Software Company Impacted By Online Poker Cyber Attack Issues Statement

Jurojin has issued a statement regarding a major online poker scandal.
Bill Schenkelberg October 4, 2026 at 3:47pm

https://thehackernews.com/2026/09/kiteworks-urges-customers-to-shut...

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

Kiteworks urges a nine-hour precautionary shutdown after federal intelligence warned a threat actor may target some systems.

of 143

This reply was deleted.

Red Sky Alliance

For more information about Red Sky Alliance, follow the link, ABOUT

#xg { position:relative;top:120px; } #xn_bar { top:120px; }

Hello, you need to enable JavaScript to use Red Sky Alliance.

Please check your browser settings or contact your system administrator.

Home

TRENDING

North Korea IT Workers (ITWs

ClickFix and Shai-Hulud npm Attacks

MI5 Warns of Spies

AI and the Philadelphia Police

CCP-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

Cyber Security Teams Stretched to the Breaking Point

ZeroTokens Phishing Campaign Targets Banks

BEC in South Africa

Note: this page contains paid content.

MITRE ATT&CK

REDXRAY

In the News

REDSHORT Webinars

Cyber Security Blog

Comments

Red Sky Alliance