~/f4n6 $ adversetrace --feed --since 30d --attributed
// security feed

Security Feed

Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.

all CVE advisory ransomware DORA / NIS2 APT
03 Nov 2026 Jeff Davies
Huntress links toy dog scam network to $40M ransomware laundering

1. Executive summary Huntress has published an episode of its declassified series that connects two money flows: a network of more than 250 near-

→
03 Nov 2026 Jeff Davies
3AM affiliate uses AI-like loops in European school breach

1. Executive summary Dark Reading reports that an affiliate of the 3AM ransomware operation breached a European school and that evidence suggests a language

→
03 Nov 2026 Jeff Davies
Gorbag APT uses WinRAR flaw to steal credentials from Ukrainian gov

1. Executive summary ESET is tracking a Russia-aligned group it calls Gorbag, which has broken into Ukrainian organisations since at least February 2025

→
03 Nov 2026 Jeff Davies
Revolve breach exposes 1.5M card numbers and expiration dates

1. Executive summary Online fashion retailer Revolve Group has told customers that their names, addresses, payment card numbers and card expiration dates were stolen,

→
03 Nov 2026 Jeff Davies
Kaspersky details MLEP in KICS 5.0 for OT anomaly detection

1. Executive summary Kaspersky published a product description of the Machine Learning Event Processor (MLEP), a service included in Kaspersky Industrial CyberSecurity for Networks

→
03 Nov 2026 Jeff Davies
CrowdStrike embeds Falcon sensor in Claude Cowork VM to close AI agent visibility gap

1. Executive summary CrowdStrike announced at Fal.Con Europe 2026 that it is bringing Falcon Guardian protection into Anthropic's Claude Cowork by

→
03 Nov 2026 Jeff Davies
Google dismantles XCPE botnet operated by Videostrong Technology

1. Executive summary Google has dismantled a botnet tracked as XCPE that comprised 1.3 million Android devices, according to SecurityWeek. SecurityWeek attributes the

→
03 Nov 2026 Jeff Davies
PixelLeaks lists Unnamed IT victim on leak site

1. Executive summary On 2026-11-03 the leak-site index ransomware.live recorded an entry in which the group calling itself PixelLeaks lists

→
03 Nov 2026 Jeff Davies
AI agents install unpatched MCP servers via MCPhantom pattern

1. Executive summary Glow Labs reviewed real AI coding session transcripts and found coding agents installing deprecated Model Context Protocol (MCP) servers from archived

→
03 Nov 2026 Jeff Davies
NCSC warns AI-powered ransomware will hit UK critical infrastructure by 2028

1. Executive summary The NCSC published its State of the Cyber Nation report on 3 November 2026 and warned that AI-powered malware is

→
03 Nov 2026 Jeff Davies
NCSC projects AI-powered ransomware against UK CNI by 2028

1. Executive summary The NCSC published an assessment on 3 November 2026 judging it highly likely that AI-powered malware will have been used

→
03 Nov 2026 Jeff Davies
Unit 42 reports AI-enabled social engineering and multi-extortion trends

1. Executive summary Unit 42 published a threat-intelligence highlights bulletin on 2 November 2026 describing three activity clusters it observed: state-sponsored espionage,

→