~/f4n6 $ adversetrace --feed --since 30d --attributed
// security feed

Security Feed

Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.

all CVE advisory ransomware DORA / NIS2 APT
26 Oct 2026 Jeff Davies
Qilin ransomware group lists UK financial firm Power Funding on leak site

1. Executive summary The Qilin ransomware group listed Power Funding, a UK financial firm (powerfundingltd.com), on its leak site on 2026-10-26.

→
26 Oct 2026 Jeff Davies
Qilin ransomware group lists TeleTronic on leak site with minimal technical detail

1. Executive summary The Qilin ransomware group listed TeleTronic, a Spanish entity, on its leak site on 2026-10-26. The listing carries no

→
26 Oct 2026 Jeff Davies
Qilin ransomware group lists UK laminates manufacturer on leak site

1. Executive summary The Qilin ransomware group listed Bangor Wholesale Laminates, a UK laminates manufacturer, on its leak site on 2026-10-26. The

→
26 Oct 2026 Jeff Davies
CPython security policy bypass vulnerabilities CVE-2026-114583 and CVE-2026-115557 require urgent…

1. Executive summary The French national CERT (CERT-FR) published advisory CERTFR-2026-AVI-1379 on 26 October 2026 covering two vulnerabilities in CPython

→
26 Oct 2026 Jeff Davies
MongoDB drivers and Compass face multiple critical vulnerabilities including RCE and SQLi

1. Executive summary CERT-FR published an advisory on 26 October 2026 covering multiple vulnerabilities in MongoDB products: the C Driver, the C# Driver,

→
26 Oct 2026 Jeff Davies
IBM AIX, QRadar, and Sterling face critical RCE and privilege escalation flaws

1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1378 on 23 October 2026 covering multiple vulnerabilities across IBM AIX, VIOS, Cognos Analytics,

→
26 Oct 2026 Jeff Davies
Privilege escalation in Visual Studio and PowerShell CVE-2026-111497

1. Executive summary Microsoft has published a fix for CVE-2026-111497, a privilege-escalation flaw affecting Visual Studio 2019, 2022 and 2026 and

→
26 Oct 2026 Jeff Davies
Citrix XenServer policy bypass CVE-2026-114406 requires urgent patching

1. Executive summary Citrix published security bulletin CTX697257 on 23 October 2026 covering CVE-2026-114406, a policy bypass in XenServer 8.4 and

→
26 Oct 2026 Jeff Davies
Oracle Solaris and ZFS flaws allow remote code execution and data breach

1. Executive summary Oracle published its October 2026 Critical Patch Update (cpuoct2026) on 20 October 2026, and CERT-FR issued advisory CERTFR-2026-AVI-

→
26 Oct 2026 Jeff Davies
Oracle Java SE critical RCE flaws require immediate patching under DORA

1. Executive summary Oracle published the October 2026 Critical Patch Update (cpuoct2026) on 20 October 2026, and CERT-FR issued advisory CERTFR-2026-AVI-

→
26 Oct 2026 Jeff Davies
Falcon ransomware group leaks 738 GB of Astrana Health data including PII and financial records

1. Executive summary On 2026-10-25 the ransomware group calling itself Falcon listed Astrana Health (US healthcare services, NASDAQ: ASTH) on its leak

→
26 Oct 2026 Jeff Davies
Aurora leaks payroll and OEM credentials from Italian auto supplier Ernesto Malvestiti

1. Executive summary The aurora ransomware group listed Ernesto Malvestiti S.p.A., a privately-held Italian manufacturer of precision aluminium die-cast and

→