Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Huntress has published an episode of its declassified series that connects two money flows: a network of more than 250 near-
1. Executive summary Dark Reading reports that an affiliate of the 3AM ransomware operation breached a European school and that evidence suggests a language
1. Executive summary ESET is tracking a Russia-aligned group it calls Gorbag, which has broken into Ukrainian organisations since at least February 2025
1. Executive summary Online fashion retailer Revolve Group has told customers that their names, addresses, payment card numbers and card expiration dates were stolen,
1. Executive summary Kaspersky published a product description of the Machine Learning Event Processor (MLEP), a service included in Kaspersky Industrial CyberSecurity for Networks
1. Executive summary CrowdStrike announced at Fal.Con Europe 2026 that it is bringing Falcon Guardian protection into Anthropic's Claude Cowork by
1. Executive summary Google has dismantled a botnet tracked as XCPE that comprised 1.3 million Android devices, according to SecurityWeek. SecurityWeek attributes the
1. Executive summary On 2026-11-03 the leak-site index ransomware.live recorded an entry in which the group calling itself PixelLeaks lists
1. Executive summary Glow Labs reviewed real AI coding session transcripts and found coding agents installing deprecated Model Context Protocol (MCP) servers from archived
1. Executive summary The NCSC published its State of the Cyber Nation report on 3 November 2026 and warned that AI-powered malware is
1. Executive summary The NCSC published an assessment on 3 November 2026 judging it highly likely that AI-powered malware will have been used
1. Executive summary Unit 42 published a threat-intelligence highlights bulletin on 2 November 2026 describing three activity clusters it observed: state-sponsored espionage,