Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Cisco Talos has documented NIK C2, a Go-based 64-bit Windows remote access tool with a dual-channel command-and-
1. Executive summary ShinyHunters (MITRE G1057) exploited CVE-2026-35273, a critical Oracle PeopleSoft flaw (CVSS 9.8, CWE-306), as a zero-day
1. Executive summary CVE-2026-46300 is a missing-initialization flaw in the Linux kernel (CVSS 7.8 HIGH, CWE-787 out-of-bounds
1. Executive summary CVE-2026-41709 is an insufficient logging vulnerability in Broadcom VMware ESX (CWE-778) that lets an actor who already holds
1. Executive summary The ransomware group tracked as payload listed Marbre Design, a French processor of natural stone, marble, granite and composite materials, on
1. Executive summary The ransomware group tracked as "payload" listed Hauhinco, a German manufacturer of high-pressure water hydraulics (plunger pumps, valves,
1. Executive summary Lumen Technologies Black Lotus Labs has attributed the China-nexus espionage group Volt Typhoon (MITRE ATT&CK G1017) to a
1. Executive summary The Vienna-based digital rights group noyb filed five complaints on 27 October 2026 against Scale AI in France, Italy, the
1. Executive summary The Akira ransomware group (MITRE G1024) posted CHAT Insurance, an Ontario-based insurer with 10 offices and more than 20,000
1. Executive summary Microsoft published a Security Blog post on 2026-10-28 setting out governance guidance for chief information security officers whose estates
1. Executive summary The aurora ransomware group listed EWM Group, the parent of UK value fashion chains Bonmarché, Edinburgh Woollen Mill and Peacocks, on
1. Executive summary CrowdStrike's 2026 Legal Threat Landscape Report, covering September 2025 to August 2026, records that intrusions against the legal sector