MEDIUMVulnerability
Global

RedWing Android Spyware Sold as a Service on Telegram

·Source: Infosecurity Magazine

Updated:

Executive Summary

Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps

Analysis

Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps
Source Attribution

Originally published by Infosecurity Magazine on Jul 8, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Entra passkey enrollment vishing targets Microsoft 365 users

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey. [...]

BleepingComputer
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-9074 — IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains...

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

CVE-2026-9074
NIST NVD
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-59702 — repomix contains a server-side request forgery vulnerability in the POST /api/pa...

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers to access private network addresses, GCP metadata services, or local filesystem paths.

CVE-2026-59702
NIST NVD