Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Ransomware.live indexed a Rhysida leak-site claim naming Malaysian maritime services provider MISC Group and alleging the theft of 29,
1. Executive summary Apple's October 2026 updates address 304 vulnerabilities across iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari. The release extends
1. Executive summary CVE-2026-109619 is a use-after-free in the PHP runtime (CVSS 9.2, critical) that allows unauthenticated remote code
1. Executive summary On 2026-10-26 the extortion group Whitearmor listed Gamdom, an unregulated crypto casino and sportsbook founded in 2016, on its
1. Executive summary A Miasma-family npm worm, tracked by SafeDep as the "testmetest" campaign and initially assessed as operator testing with
1. Executive summary Threat actors are using Microsoft Teams external collaboration to impersonate internal IT and helpdesk staff, persuading employees to grant interactive remote
1. Executive summary CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder, which Node.js bundles as a
1. Executive summary Elastic Security Labs has documented BITSLOTH, a Windows backdoor that uses the Background Intelligent Transfer Service (BITS) for command-and-control,
1. Executive summary A UK-based pentester, Jaydip Modhwadia ("Killa"), achieved remote code execution against a deliberately vulnerable public website on 2026-
1. Executive summary LiteLLM, an open-source AI gateway, confirmed on 21 October 2026 that stolen developer tokens were used to publish a malicious
1. Executive summary The Qilin ransomware group listed Taubensee Steel & Wire, a German steel and wire manufacturer (taubensee.com), on its leak site
1. Executive summary The Qilin ransomware group listed FIRMENGRUPPE APPL Holding GmbH, a German holding company, on its leak site on 2026-10-26.