Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Tencent's Zhuque Lab has released AI-Infra-Guard, a free, open-source security scanner for AI infrastructure, available on
1. Executive summary Google has patched CVE-2026-87491, an out-of-bounds write in the V8 JavaScript/WebAssembly engine, and states that an
1. Executive summary On 2026-09-08, the ransomware operator "safepay" listed the Spanish firm GSN Gestión (gsngestion.es, Villaviciosa de Odón,
1. Executive summary Microsoft's September 2026 Patch Tuesday is the largest on record: 973 vulnerabilities per Talos (Rapid7 counts 974 own-product
1. Executive summary On 2026-09-08, the ransomware operator "safepay" publicly listed the Portuguese company hbpro.pt as a victim on
1. Executive summary On 2026-09-08, the ransomware group "safepay" listed the Spanish ceramics manufacturer Gayafores (gayafores.es, headquartered in Onda,
1. Executive summary On 2026-09-08, the ransomware group operating under the name "safepay" publicly listed the Italian insurance brokerage and
1. Executive summary Microsoft's September 2026 Patch Tuesday is the largest single-day release in the company's history: 974 own-
1. Executive summary ClickFix — a social-engineering technique in which a fake webpage (styled as a CAPTCHA check, browser update notice, or meeting error)
1. Executive summary Microsoft's September 2026 Patch Tuesday is the largest release on record: 964 CVEs patched, 104 rated critical and 860
1. Executive summary Adobe has released patches for more than 170 vulnerabilities across its product line, headlined by CVE-2026-75650 (CVSS 10.0,
1. Executive summary CVE-2026-75650 is a CVSS 10.0 CRITICAL unauthenticated remote code execution vulnerability in Adobe Commerce, Adobe Commerce B2B and