Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Attackers have begun probing CVE-2026-101767, an unauthenticated SQL injection in Oracle E-Business Suite that can be exploited for
1. Executive summary Atlantis, the pull-request automation server for Terraform, passes the workspace value from a pull request's atlantis.yaml into
1. Executive summary Huntress reports a series of incidents in September and October 2026 in which an unidentified threat actor used compromise of a
1. Executive summary Moldova's e-government agency has confirmed that attackers extracted personal data on roughly 750,000 citizens, about a third
1. Executive summary ShinyHunters (MITRE G1057) exploited CVE-2026-35273 in Oracle PeopleSoft Enterprise PeopleTools as a zero-day from 27 May 2026, before
1. Executive summary Tailscale released client version 1.104.4 on 2026-10-28 to fix privilege escalation flaws in its built-in SSH
1. Executive summary Dark Reading reported on 2026-10-27 that a Shai-Hulud attack demonstrated that software bills of materials (SBOMs) alone cannot
1. Executive summary Kroll's Data Breach Outlook 2026 reports that nearly seven in ten individuals affected by data breaches Kroll handled over
1. Executive summary The Rhysida ransomware group listed the Belgian municipality of Machelen (Flemish Brabant) on its leak site on 2026-10-27, claiming
1. Executive summary Attackers are combining email bombing, lookalike domain infrastructure and Microsoft Teams' external chat creation feature to run impersonation and IT-
1. Executive summary The University of Copenhagen has confirmed that intruders accessed a test environment holding personal data on 525,000 people, detected the
1. Executive summary CVE-2026-111497 is an out-of-bounds write in Google's Brotli C decoder library, scored 9.2 CRITICAL