Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary UK Biobank has completed remediation of its Research Analysis Platform (UKB-RAP) and is awaiting approval from health data controllers and
1. Executive summary Germany's BSI published advisory WID-SEC-2026-4143 on 2026-10-26, rated hoch (high), stating that an attacker
1. Executive summary Anthropic has published the security and privacy design behind Claude Duet, a proactive AI agent that operates a cloud-hosted browser
1. Executive summary LiteLLM, an open-source AI gateway with roughly 23 million weekly downloads, published version 1.107.0 to PyPI and Docker
1. Executive summary Forever Security found a 13 KB file named AGENTS.md in the Downloads folder of a customer machine, written to make
1. Executive summary A SANS ISC guest diary by intern Jeffray Spence describes using Elastic Kibana field statistics on DShield honeypot data to isolate
1. Executive summary Kaspersky published a product-capability note describing how its endpoint, EDR, threat-intelligence and scanning products detect and restrict AI agents
1. Executive summary An out-of-bounds write in Google's Brotli decoder, tracked as CVE-2026-111497 and nicknamed Node2Shell, affects Brotli
1. Executive summary Huntress tracked a Microsoft 365 token-replay campaign from 14 July to 22 September 2026 that produced 497 successful sign-ins
1. Executive summary A ransomware group calling itself "payload" listed Edelstahl-Mechanik GmbH, a laser metal processing and sheet metal fabrication company
1. Executive summary A ransomware group tracked as "payload" listed Glückauf-Vermessung GmbH, a German surveying and mine-surveying firm in Sondershausen
1. Executive summary A ransomware group calling itself "payload" listed Miletic GmbH, a German construction contractor based in Bad Schönborn, on its