Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary A malicious npm package named imgdecode, uploaded on 30 September 2026 by the account malfexteste8, is part of the MALFEX software
1. Executive summary Citizen Lab has documented a campaign, AdFection, in which ads brokered by Israeli adtech firm Discover-Tech were used to fingerprint
1. Executive summary A credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was used to authenticate into customer Microsoft 365 tenants and obtain Microsoft
1. Executive summary A zero-day in BeyondTrust Remote Support appliances, tracked as CVE-2026-102764, was exploited in espionage intrusions before a patch
1. Executive summary Threat actors are impersonating the brands of popular AI platforms, including Anthropic's Claude, OpenAI's ChatGPT, Google Gemini,
1. Executive summary Volexity's third "Mind the (Patch) Gap" post is a tooling walkthrough, not a new intrusion report: it
1. Executive summary CVE-2026-102764 is an authentication bypass by spoofing vulnerability in BeyondTrust Remote Support (CVSS 9.3, critical, CWE-290) that
1. Executive summary CVE-2025-61624 is a path traversal flaw (CWE-22) in FortiOS, FortiPAM, FortiProxy and FortiSwitchManager that lets an authenticated attacker
1. Executive summary GitLab released 19.4.2, 19.3.5 and 19.2.8 on 2026-10-12 to fix CVE-2026-97229,
1. Executive summary Microsoft and NVIDIA published a joint guidance paper, Risk Management for Open-Weight Models in Enterprise, on 2026-10-16, the
1. Executive summary A China-nexus espionage actor tracked as Armory Castle (previously UNC5221, also tracked by CrowdStrike as Warp Panda) exploited CVE-2026-
1. Executive summary A financially motivated actor tracked as TAG-217 used ARTEX, a Chinese-language open-source AI penetration testing framework, against at