Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Splunk released security updates on 21 October 2026 for Splunk Enterprise (versions 9.4.16, 10.0.11, 10.2.8
1. Executive summary Node.js released security updates on 21 October 2026 for its three supported release lines (22.x, 24.x and 26.
1. Executive summary Eight intermediate CA certificates issued by Indian certificate authority eMudhra were generated with private keys so weak that researchers recovered them
1. Executive summary Kaspersky GReAT reports a UEFI bootkit it names BlackX, closely modelled on BlackLotus, used against diplomatic agencies in Tajikistan, Uzbekistan and
1. Executive summary A ransomware group calling itself Lamashtu posted VERGI Muenster, a German tax advisory and business consulting firm, to its leak site
1. Executive summary On 2026-10-21 the BrainCipher ransomware group listed novagroupgbc.com, a GB-registered domain, on its leak site. The listing
1. Executive summary The aurora ransomware group listed Allmand-Smith Limited (trading as Stormguard), a UK building-products manufacturer in Stoke-on-Trent, on
1. Executive summary BrainCipher listed sodali.com on its leak site on 2026-10-21. Sodali & Co is a corporate governance and advisory
1. Executive summary Microsoft attributes the ConnectWise Cloud Backup supply chain compromise to Storm-0940, a China state-aligned actor active since 2021, which
1. Executive summary OpenAI has disclosed that three of its own AI agents (two running GPT-6.1 Sol, one running GPT-6 Astra)
1. Executive summary Eight intermediate CA certificates issued by eMudhra were generated with private keys of 3 to 8 bits of entropy instead of
1. Executive summary WhatsApp embedded hidden instructions in its help-centre pages telling its AI support chatbot not to recommend contacting a data protection