RedLegg

Veteran owned information security service provider. RedLegg crafts custom solutions designed to find & eliminate vulnerabilities unique to your business.

[RedLegg @RedLegg]

Would you spot a fake domain that looks identical?

Attackers need credibility, not access.

Small changes make fake domains look real.

Download the infographic to understand how homographic attacks work👇

#Cybersecurity #Phishing #MDR #ThreatDetection #InfoSec

[RedLegg @RedLegg]

Security Bulletin: Windows Netlogon (CVE-2026-41089, CVSS 9.8) allows unauthenticated remote code execution on Windows Server systems. Exploited in the wild — patch now.

#ThreatIntel #RedLeggCTI
https://t.co/fm0UqfmoGa

[RedLegg @RedLegg]

How prepared is your team for a real incident?

Plans don’t fail on paper.
They fail in real time.

Without practice, response breaks down.

Test your response before it matters⬇️:
https://t.co/tBVjwGhrmH

#Cybersecurity #IncidentResponse #TabletopExercises

[RedLegg @RedLegg]

Security Bulletin: PAN-OS GlobalProtect Authentication Bypass Vulnerability - PAN-OS GlobalProtect vulnerability (CVE-2026-0257) allows authentication bypass in affected GlobalProtect deployments. Exploit attempts observed. Patch immediately.
https://t.co/eda27VDbBS

[RedLegg @RedLegg]

Are low-severity findings really low risk?

Not when they connect.

Individually manageable.
Together, a path.

See how penetration testing uncovers real attack paths:
https://t.co/a3wpCN4mKk

#Cybersecurity #PenTesting #RiskManagement #ThreatExposure #InfoSec

[RedLegg @RedLegg]

CVE-2026-48027 - Critical Supply Chain Alert: Nx Console (VS Code) version 18.95.0 was compromised and is actively exploited (CISA KEV). Malicious code was distributed via official marketplaces in a short attack window.

#ThreatIntel #NXConsole
https://t.co/HClumD1uk4

[RedLegg @RedLegg]

Security Bulletin: DAEMON Tools Lite (CVE-2026-8398, CVSS 9.8) was impacted by a malicious supply-chain compromise. Exploited in the wild — act now. #ThreatIntel #RedLeggCTI
https://t.co/iAGp1AZsUi

[RedLegg @RedLegg]

Fake domain.
Real domain.

They look the same.
That’s the point.😬

Modern phishing doesn’t rely on obvious mistakes.
It blends in.

One moment of recognition over verification is all it takes.

#Phishing #SocialEngineering #CyberSecurity #HumanRisk

[RedLegg @RedLegg]

Detection isn’t the win.
Response is.

Delays and lack of context = escalation.

See how response makes the difference⬇️:
https://t.co/OHPxttN6Mw

#Cybersecurity #MDR #IncidentResponse #ThreatDetection #SecurityOperations #InfoSec

[RedLegg @RedLegg]

Looks legitimate.
It isn’t.

Homograph attacks swap identical-looking characters.
To systems, they’re valid.

No clear signal to flag.

See how these threats are handled⬇️:
https://t.co/rXiROPjZ8Q

#Cybersecurity #Phishing #MDR #ThreatDetection #IncidentResponse

[RedLegg @RedLegg]

Would you spot a fake domain that looks identical?

Looks real.
That’s the point.

Detection depends on what happens next.

See how threats are identified and validated⬇️:
https://t.co/2ZsjRun4wI

#Cybersecurity #Phishing #ThreatDetection #MDR #SecurityOperations #InfoSec

[RedLegg @RedLegg]

Vulnerability Alert: CVE-2026-34926 impacting Trend Micro Apex One is now confirmed exploited and listed in CISA KEV. Attackers can abuse directory traversal to access sensitive files under certain conditions.

#ThreatIntel #TrendMicro #CISAKEV
https://t.co/r22dZ0oxfL

[RedLegg @RedLegg]

Security Bulletin: Cisco Secure Workload (CVE-2026-20223, CVSS 10.0) allows authentication bypass and Site Admin access via REST API flaws. Patch now.

#ThreatIntel #RedLeggCTI
https://t.co/L2zshl0Ap3

[RedLegg @RedLegg]

Security Bulletin: Multiple Microsoft Defender vulnerabilities (CVE-2026-41091, CVE-2026-45498) are actively exploited in the wild. Update Defender immediately.
#ThreatIntel #RedLeggCTI
https://t.co/Cw6DrjtED3

[RedLegg @RedLegg]

Automation fails in the workflow.

Manual steps slow response.

Connected workflows turn signals into action.
See how phishing investigation actually works⬇️:
https://t.co/qSZQyuUbV8

#Cybersecurity #MDR #Phishing #SecurityOperations

[RedLegg @RedLegg]

Security Bulletin: Mini Shai-Hulud expands into the AntV ecosystem, compromising 300+ npm packages in a large-scale supply chain attack. Malicious updates used obfuscated preinstall scripts to steal credentials

#ThreatIntel #AntV #SupplyChainAttack
https://t.co/Sv4nUvuncF

[RedLegg @RedLegg]

Security Bulletin: Azure Local Disconnected Operations Elevation of Privilege Vulnerability
CVE-2026-42822 is critical (CVSS 10.0) - Remediation requires upgrading ALDO systems to version 2604 or later via a full system update.

#ThreatIntel ...
https://t.co/B4yug40NYB

[RedLegg @RedLegg]

Security Bulletin: Cisco SD-WAN (CVE-2026-20182, CVSS 10.0) allows authentication bypass in controller infrastructure. Exploited in the wild — patch now.

#ThreatIntel #RedLeggCTI
https://t.co/yUboHWMsVH

[RedLegg @RedLegg]

What if attackers don’t need to break in?

They log in.

Stolen credentials.
Valid sessions.

Access is the attack surface.

See how modern penetration testing uncovers it⬇️:
https://t.co/ntQbI5G4ij

#Cybersecurity #PenTesting #IdentitySecurity #InfoSec

[RedLegg @RedLegg]

Security Bulletin: Cisco SD-WAN (CVE-2026-20182, CVSS 10.0) allows authentication bypass in controller infrastructure. Exploited in the wild — patch now.
#ThreatIntel #RedLeggCTI
https://t.co/2ddx3Ux96V