Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary CERT-FR published an advisory on 22 October 2026 covering three ISC BIND vulnerabilities disclosed by ISC the previous day: CVE-
1. Executive summary BSI Germany published WID-SEC-2026-4099 on 2026-10-22, rated hoch, covering multiple vulnerabilities in Splunk SOAR. The advisory
1. Executive summary CrowdStrike reports four previously unreported threat actors running agentic AI campaigns between May and August 2026, in which large language model
1. Executive summary BSI Germany published WID-SEC-2026-4107 on 2026-10-22, rating multiple vulnerabilities in the Vaadin Java web framework as
1. Executive summary Huntress has published an analysis of three phishing kits that target Microsoft 365 session tokens rather than passwords, using device-code
1. Executive summary On 21 October 2026 LiteLLM's release pipeline was compromised and version 1.107.0 was published to PyPI and
1. Executive summary Tenable reports that security incidents involving organisations' shadow AI assets more than doubled year on year, to 43% from 20%
1. Executive summary Between 14 July and 22 September 2026, Huntress recorded 497 successful Microsoft 365 sign-ins across 79 victim organisations in which
1. Executive summary Anthropic has updated Claude Security, its codebase vulnerability scanning and patch-suggestion service, with recurring scans of code changes, automatic fix
1. Executive summary A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer&
1. Executive summary Microsoft attributes a supply chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China-state-aligned actor active
1. Executive summary Cisco has released fixes for 34 vulnerabilities across Expressway Series, Unified Communications, Snort 3, IOS XR and Secure Client, announced on