~/f4n6 $ adversetrace --feed --since 30d --attributed
// security feed

Security Feed

Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.

all CVE advisory ransomware DORA / NIS2 APT
28 Oct 2026 Jeff Davies
Ransomware group payload lists German hydraulics maker Hauhinco on leak site

1. Executive summary The ransomware group tracked as "payload" listed Hauhinco, a German manufacturer of high-pressure water hydraulics (plunger pumps, valves,

→
28 Oct 2026 Jeff Davies
Volt Typhoon attributed to Silent Train network used for zero-day campaigns

1. Executive summary Lumen Technologies Black Lotus Labs has attributed the China-nexus espionage group Volt Typhoon (MITRE ATT&CK G1017) to a

→
28 Oct 2026 Jeff Davies
noyb sues Scale AI over alleged invasive worker surveillance and biometric data collection

1. Executive summary The Vienna-based digital rights group noyb filed five complaints on 27 October 2026 against Scale AI in France, Italy, the

→
28 Oct 2026 Jeff Davies
Akira lists Ontario-based CHAT Insurance on leak site with 112GB of data

1. Executive summary The Akira ransomware group (MITRE G1024) posted CHAT Insurance, an Ontario-based insurer with 10 offices and more than 20,000

→
28 Oct 2026 Jeff Davies
Microsoft outlines CISO strategies for governing enterprise AI agents and defense

1. Executive summary Microsoft published a Security Blog post on 2026-10-28 setting out governance guidance for chief information security officers whose estates

→
28 Oct 2026 Jeff Davies
Aurora ransomware group leaks EWM Group customer and employee data

1. Executive summary The aurora ransomware group listed EWM Group, the parent of UK value fashion chains Bonmarché, Edinburgh Woollen Mill and Peacocks, on

→
28 Oct 2026 Jeff Davies
China-nexus actors exploit CVE-2026-41709 and legal software in intensified espionage campaigns

1. Executive summary CrowdStrike's 2026 Legal Threat Landscape Report, covering September 2025 to August 2026, records that intrusions against the legal sector

→
28 Oct 2026 Jeff Davies
Docker Desktop local info disclosure flaw risks EMEA finance dev environments

1. Executive summary BSI's Warn- und Informationsdienst published WID-SEC-2026-4186 on 2026-10-28, rated mittel (medium), describing a vulnerability

→
28 Oct 2026 Jeff Davies
Sony So-net breach exposes 2.6M records and email passwords in Japan

1. Executive summary Sony Network Communications has disclosed that unauthorised access to the So-net member database exposed personal data on more than 2.

→
28 Oct 2026 Jeff Davies
FBI seizes Virtualine hosting provider linked to money laundering and ransomware infrastructure

1. Executive summary The FBI's Washington Field Office has seized the domain virtualine.net, a bulletproof hosting provider that traded under the

→
28 Oct 2026 Jeff Davies
Chinese-nexus actor uses ARTEX AI tool to breach 123 Reg customer data

1. Executive summary UK domain registrar 123 Reg disclosed that an intrusion on 18 September 2026 exposed customer contact data, customer relationship data, company

→
28 Oct 2026 Jeff Davies
Cisco open-sources Project Quarry to detect rogue AI agent behavior and data exfiltration

1. Executive summary Cisco has open-sourced Project Quarry, a behaviour detection engine for AI agents that evaluates an entire agent session rather than

→