<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Redteam Relay</title><description>Operator-focused notes, copy-ready commands, and tradecraft for red teamers, pentesters, and security practitioners.</description><link>https://www.redteamrelay.com/</link><language>en-us</language><copyright>© 2026 Redteam Relay</copyright><lastBuildDate>Mon, 10 Aug 2026 21:42:04 GMT</lastBuildDate><atom:link href="https://www.redteamrelay.com
/rss.xml" rel="self" type="application/rss+xml"/><item><title>Threat Brief: Supply-Chain, Trusted Vendor Attack Surfaces Rising</title><link>https://www.redteamrelay.com/posts/threat-brief-supply-chain-trusted-vendor-attack-surfaces-rising/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/threat-brief-supply-chain-trusted-vendor-attack-surfaces-rising/</guid><description>An uptick in third-party and vendor compromises shows how attackers are targeting trust chains. Here’s what to fix right now before your partners become your breach vector.</description><pubDate>Mon, 20 Oct 2025 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/20/800/450" length="0" type="image/png"/></item><item><title>Announcing Redteam Relay News</title><link>https://www.redteamrelay.com/posts/announcing-redteamrelay-news/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/announcing-redteamrelay-news/</guid><description>After building Redteam Relay as my practitioner’s notebook, I’m extending it to deliver a focused news feed. The core mission doesn’t change: short, practical writing on hacking, defensive strategy and operational security. This site blends offensive perspective with defensive execution to help you move quickly. Making timely news part of that was the logical next step.</description><pubDate>Wed, 15 Oct 2025 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/46/800/450" length="0" type="image/png"/></item><item><title>Threat Brief: Qantas Leak and Oracle Zero‑Day</title><link>https://www.redteamrelay.com/posts/threat-brief-qantas-leak-and-oracle-zeroday/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/threat-brief-qantas-leak-and-oracle-zeroday/</guid><description>This week’s brief focuses on two major events: a data leak impacting Qantas and dozens of other companies, and a zero‑day vulnerability exploited in Oracle’s E‑Business Suite</description><pubDate>Wed, 15 Oct 2025 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/24/800/450" length="0" type="image/png"/></item><item><title>SIM Farm Discovered by Federal Agents</title><link>https://www.redteamrelay.com/posts/sim-farm-discovered-by-federal-agents/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/sim-farm-discovered-by-federal-agents/</guid><description>Investigators reference organized crime and possible foreign links, but no public arrests yet.</description><pubDate>Fri, 26 Sep 2025 00:00:00 GMT</pubDate><category>command-and-control</category><category>discovery</category><category>impact</category><category>on-prem-attack</category><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/15/800/450" length="0" type="image/png"/></item><item><title>Fending off the Lynx Group Ransomware</title><link>https://www.redteamrelay.com/posts/fending-off-the-lynx-group-ransomware/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/fending-off-the-lynx-group-ransomware/</guid><description>A short write-up of how we mitigated an attack for a client</description><pubDate>Thu, 21 Nov 2024 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/35/800/450" length="0" type="image/png"/></item><item><title>Cyber Outage Alert: CrowdStrike Hit by Major Disruption</title><link>https://www.redteamrelay.com/posts/cyber-outage-alert-crowdstrike-hit-by-major-disruption/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/cyber-outage-alert-crowdstrike-hit-by-major-disruption/</guid><description>The disruption, stemming from a junior engineer pushing out a bad update, has left many businesses offline, vulnerable and scrambling to secure their systems.</description><pubDate>Sat, 20 Jul 2024 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/26/800/450" length="0" type="image/png"/></item><item><title>Laundering site Sinbad seized</title><link>https://www.redteamrelay.com/posts/laundering-site-sinbad-seized/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/laundering-site-sinbad-seized/</guid><description>Cryptocurrency mixers, like Sinbad, allow users to deposit crypto, which is then mixed among various wallet addresses to obscure its traceability.</description><pubDate>Thu, 30 Nov 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/10/800/450" length="0" type="image/png"/></item><item><title>Not my dearest Okta :(</title><link>https://www.redteamrelay.com/posts/not-my-dearest-okta-/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/not-my-dearest-okta-/</guid><description>Cybersecurity month may be over, but the breaches don&apos;t stop.</description><pubDate>Thu, 02 Nov 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/21/800/450" length="0" type="image/png"/></item><item><title>Cyber Warfare in the Middle East: A Growing Concern</title><link>https://www.redteamrelay.com/posts/cyber-warfare-in-the-middle-east-a-growing-concern/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/cyber-warfare-in-the-middle-east-a-growing-concern/</guid><description>This is my way of bringing some of the conflict to light. </description><pubDate>Sat, 14 Oct 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/28/800/450" length="0" type="image/png"/></item><item><title>23andMe Data Breach Alert!</title><link>https://www.redteamrelay.com/posts/23andme-data-breach-alert/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/23andme-data-breach-alert/</guid><description>Hackers infiltrated, using recycled login credentials to pilfer 23andMe accounts</description><pubDate>Wed, 11 Oct 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/41/800/450" length="0" type="image/png"/></item><item><title>Sony Cybersecurity Breach... Again.</title><link>https://www.redteamrelay.com/posts/sony-cybersecurity-breach-again/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/sony-cybersecurity-breach-again/</guid><description>This vulnerability, a severe SQL injection flaw leading to remote code execution, was exploited by the notorious Clop ransomware gang.</description><pubDate>Thu, 05 Oct 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/27/800/450" length="0" type="image/png"/></item><item><title>Emerging Threat Alert: ShadowSyndicate</title><link>https://www.redteamrelay.com/posts/emerging-threat-alert-shadowsyndicate/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/emerging-threat-alert-shadowsyndicate/</guid><description>Cybersecurity experts have exposed a new cybercrime entity named ShadowSyndicate (formerly Infra Storm), which may have harnessed up to seven different ransomware families in the past year.</description><pubDate>Wed, 04 Oct 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/36/800/450" length="0" type="image/png"/></item><item><title>Cisco Redefines Cybersecurity Landscape with $28 Billion Splunk Acquisition!</title><link>https://www.redteamrelay.com/posts/cisco-redefines-cybersecurity-landscape-with-28-billion-splunk-acquisition/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/cisco-redefines-cybersecurity-landscape-with-28-billion-splunk-acquisition/</guid><description>This all-cash agreement, representing a 31% premium over Splunk&apos;s stock price, marks Cisco&apos;s largest deal to date.</description><pubDate>Tue, 03 Oct 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/33/800/450" length="0" type="image/png"/></item><item><title>Exciting News: October is Cybersecurity Awareness Month!</title><link>https://www.redteamrelay.com/posts/exciting-news-october-is-cybersecurity-awareness-month/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/exciting-news-october-is-cybersecurity-awareness-month/</guid><description>Get ready to dive deep into the world of digital defenses because October is Cybersecurity Awareness Month!</description><pubDate>Tue, 03 Oct 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/48/800/450" length="0" type="image/png"/></item><item><title>Enter Snatch: A ransomware-as-a-service (RaaS) operation</title><link>https://www.redteamrelay.com/posts/enter-snatch-a-ransomware-as-a-service-raas-operation/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/enter-snatch-a-ransomware-as-a-service-raas-operation/</guid><description>They&apos;ve been active since 2018 and are back in the spotlight this week.</description><pubDate>Fri, 29 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/34/800/450" length="0" type="image/png"/></item><item><title>Dark Web Drug Marketplace Shut Down by Finnish Law Enforcement!</title><link>https://www.redteamrelay.com/posts/dark-web-drug-marketplace-shut-down-by-finnish-law-enforcement/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/dark-web-drug-marketplace-shut-down-by-finnish-law-enforcement/</guid><description>The marketplace operated as a hidden service within the encrypted TOR network, enabling anonymous criminal activities, with drugs smuggled into Finland from abroad.</description><pubDate>Wed, 27 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/43/800/450" length="0" type="image/png"/></item><item><title>Insider Threat Alert: Meet Gold Melody – The Cybercrime Group Selling Your Company&apos;s Secrets!</title><link>https://www.redteamrelay.com/posts/insider-threat-alert-meet-gold-melody--the-cybercrime-group-selling-your-companys-secrets/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/insider-threat-alert-meet-gold-melody--the-cybercrime-group-selling-your-companys-secrets/</guid><description>Today, let&apos;s delve into one of the most intriguing threat actors: insiders selling access to your very own organization!</description><pubDate>Wed, 27 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/40/800/450" length="0" type="image/png"/></item><item><title>North Korea&apos;s Lazarus Group Strikes Big with $240M Crypto Heist!</title><link>https://www.redteamrelay.com/posts/north-koreas-lazarus-group-strikes-big-with-240m-crypto-heist/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/north-koreas-lazarus-group-strikes-big-with-240m-crypto-heist/</guid><description>This marks a significant escalation in their hacking activities.</description><pubDate>Wed, 27 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/11/800/450" length="0" type="image/png"/></item><item><title>Turning Security Awareness into Security Culture!</title><link>https://www.redteamrelay.com/posts/turning-security-awareness-into-security-culture/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/turning-security-awareness-into-security-culture/</guid><description>Let&apos;s take a dive into the culture of security together.</description><pubDate>Fri, 22 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/49/800/450" length="0" type="image/png"/></item><item><title>TeamsPhisher Tool Release by Navy&apos;s Red Team</title><link>https://www.redteamrelay.com/posts/teamsphisher-tool-release-by-navys-red-team/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/teamsphisher-tool-release-by-navys-red-team/</guid><description> You can take a look at the tool and its operation in the picture here.</description><pubDate>Thu, 21 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/22/800/450" length="0" type="image/png"/></item><item><title>Ransomware in the Healthcare sector!</title><link>https://www.redteamrelay.com/posts/ransomware-in-the-healthcare-sector/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/ransomware-in-the-healthcare-sector/</guid><description>Rhysida, a ransomeware-as-a-service operation, has claimed one of their first victims in the healthcare industry - Singing River Heath System. </description><pubDate>Sat, 16 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/37/800/450" length="0" type="image/png"/></item><item><title>MGM Resorts Hack of 2023</title><link>https://www.redteamrelay.com/posts/mgm-resorts-hack-of-2023/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/mgm-resorts-hack-of-2023/</guid><description>MGM Resorts International revealed yesterday that it&apos;s grappling with a cybersecurity issue affecting several systems, including its primary website, online reservations, and in-casino services like ATMs, slot machines, and credit card machines.</description><pubDate>Thu, 14 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/44/800/450" length="0" type="image/png"/></item><item><title>Ethereum Founders Twitter Gets Hacked</title><link>https://www.redteamrelay.com/posts/ethereum-founders-twitter-gets-hacked/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/ethereum-founders-twitter-gets-hacked/</guid><description>Vitalik Buterin, the creator of Ethereum crypto, found himself in an unfortunate situation when his Twitter account fell victim to a hacking incident.</description><pubDate>Wed, 13 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/39/800/450" length="0" type="image/png"/></item><item><title>Teams used as a landing pad for malware (2023)</title><link>https://www.redteamrelay.com/posts/teams-used-as-a-landing-pad-for-malware-2023/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/teams-used-as-a-landing-pad-for-malware-2023/</guid><description> Recently, companies have been seeing the abuse of Teams as a landing pad for malware.</description><pubDate>Tue, 12 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/23/800/450" length="0" type="image/png"/></item><item><title>NK Hackers Target Russian Government</title><link>https://www.redteamrelay.com/posts/nk-hackers-target-russian-government/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/nk-hackers-target-russian-government/</guid><description>North Korea, hacking another well known threat actor, Russia.</description><pubDate>Mon, 11 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/29/800/450" length="0" type="image/png"/></item><item><title>Significant Developments: USA &amp; UK Impose Sanctions on 11 Russian Nationals Linked to Ransomware</title><link>https://www.redteamrelay.com/posts/significant-developments-usa--uk-impose-sanctions-on-11-russian-nationals-linked-to-ransomware/</link><guid isPermaLink="true">https://www.redteamrelay.com/posts/significant-developments-usa--uk-impose-sanctions-on-11-russian-nationals-linked-to-ransomware/</guid><description>In an international bust, the US and the UK have imposed sanctions on 11 Russian individuals associated with the TrickBot and Conti ransomware operations.</description><pubDate>Fri, 08 Sep 2023 00:00:00 GMT</pubDate><author>Abe Tinoco</author><enclosure url="https://picsum.photos/id/45/800/450" length="0" type="image/png"/></item></channel></rss>