Redshell — Turn on cybersecurity
Redshell — Turn on cybersecurity

Technology, AI & cybersecurity

Articles and guides to understand the software around us, adopt artificial intelligence with judgment, and harden your security posture—without hype or sensationalism.

Browse articles Browse topics
Scroll

Depth & context

What each technical shift means and how it affects you in practice.

AI & product

Models, tools, and habits for using AI with judgment.

Security first

Threats, defense in depth, and habits that reduce real risk.

Explore by topic

Find content aligned with what you want to learn or ship

Technology
Artificial intelligence
Cybersecurity
Guides & tools

Latest articles

Fresh takes on technology, AI, and security

Mini Shai-Hulud Strikes: Critical npm Worm Hijacks TanStack's Trust to Steal Developer Credentials
cybersecurity

Mini Shai-Hulud Strikes: Critical npm Worm Hijacks TanStack's Trust to Steal Developer Credentials

On May 11, the Mini Shai-Hulud worm compromised 84 malicious npm package versions across 42 TanStack packages by chaining GitHub Actions misconfigurations to steal OIDC tokens and deploy credential-harvesting malware. The attack marks the first documented npm supply chain breach with valid SLSA provenance attestations.

May 12, 2026 8 min
Critical Palo Alto Networks Firewall Flaw Under Active Exploitation: Root RCE Awaits Patches
cybersecurity

Critical Palo Alto Networks Firewall Flaw Under Active Exploitation: Root RCE Awaits Patches

Palo Alto Networks confirms limited exploitation of CVE-2026-0300, a critical buffer overflow in PAN-OS User-ID Authentication Portal enabling unauthenticated remote code execution. Patches arriving May 13, 2026—organizations must act immediately.

May 11, 2026 7 min
Dirty Frag Erupts: Trio of Linux Kernel Flaws Gives Root to Unprivileged Users via Single Command
cybersecurity

Dirty Frag Erupts: Trio of Linux Kernel Flaws Gives Root to Unprivileged Users via Single Command

Three critical Linux kernel privilege escalation vulnerabilities, collectively dubbed Dirty Frag, emerged in May 2026 with working public exploits and active exploitation signs. Affecting every major Linux distribution, the flaws chain together page-cache write primitives to grant root access from unprivileged accounts—a deterministic attack far more reliable than traditional race-condition exploits.

May 10, 2026 8 min
ShinyHunters' Canvas Breach Exposes 275 Million Students and Teachers: The Supply Chain Chokepoint Attack That Changed Education Security
cybersecurity

ShinyHunters' Canvas Breach Exposes 275 Million Students and Teachers: The Supply Chain Chokepoint Attack That Changed Education Security

ShinyHunters executed a devastating ransomware attack on Instructure's Canvas platform, affecting nearly 9,000 schools globally and compromising 275 million student and teacher records. The breach exemplifies how attackers now prioritize supply chain infrastructure over individual institutions, and why education technology remains a critical vulnerability.

May 9, 2026 8 min
PCPJack: New Credential Theft Framework Targets Cloud Services in Worm-Like Attacks
cybersecurity

PCPJack: New Credential Theft Framework Targets Cloud Services in Worm-Like Attacks

Security researchers have disclosed PCPJack, a sophisticated credential theft framework that specifically targets cloud services and container platforms. The malware spreads in a worm-like fashion while harvesting credentials from Docker, Kubernetes, Redis, and financial services infrastructure.

May 8, 2026 7 min
False Flag Tactics: MuddyWater's Microsoft Teams Social Engineering Masquerades as Chaos Ransomware
cybersecurity

False Flag Tactics: MuddyWater's Microsoft Teams Social Engineering Masquerades as Chaos Ransomware

Iranian state-sponsored APT MuddyWater has been masquerading as the Chaos ransomware gang, leveraging sophisticated Microsoft Teams social engineering to harvest credentials, bypass MFA, and establish persistence without encryption. Rapid7's analysis reveals this targeted operation bypasses traditional ransomware workflows in favor of stealthy data exfiltration and long-term access.

May 7, 2026 7 min
View all articles

Newsletter

New articles, resources, and curated links. No fluff.