Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary The N0n ransomware group listed a Spanish smart grid engineering firm, indexed as Company #110, on its leak site on 2026-
1. Executive summary The aurora ransomware group listed ARX Group SA, a Swiss engineering consultancy with more than 25 offices in 17 countries, on
1. Executive summary Arista has patched an actively exploited SQL injection in on-premises VeloCloud Orchestrator (VCO), tracked as CVE-2026-114625 and rated
1. Executive summary Two critical PHP engine flaws, CVE-2026-109618 and CVE-2026-109619, both scored CVSS 9.2 and both unauthenticated remote
1. Executive summary Rapid7's Metasploit Framework release of 2026-10-23 adds eleven modules, six of which target Langflow, the open-source
1. Executive summary CVE-2026-73570 is an unauthenticated OS command injection flaw in Synacor Zimbra Collaboration Suite (ZCS), rated CVSS 8.9 HIGH
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1378 on 23 October 2026 covering multiple vulnerabilities across IBM AIX, VIOS, Cognos Analytics,
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1376 on 23 October 2026 covering multiple vulnerabilities in the Ubuntu Linux kernel, affecting
1. Executive summary CERT-FR published an advisory on 23 October 2026 covering multiple vulnerabilities in the Debian Linux kernel, affecting Debian 13 trixie
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1371 on 23 October 2026 covering multiple vulnerabilities in Microsoft Edge versions earlier than
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1368 on 23 October 2026 covering a vulnerability in Mattermost Server versions 11.7.
1. Executive summary BSI's Warn- und Informationsdienst published WID-SEC-2026-4126 on 23 October 2026, rating multiple vulnerabilities in the MongoDB