~/f4n6 $ adversetrace --feed --since 30d --attributed
// security feed

Security Feed

Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.

all CVE advisory ransomware DORA / NIS2 APT
31 Aug 2026 Jeff Davies
State-linked actor targets Cisco routers for espionage

1. Executive summary Sygnia has published incident-response findings on a China-nexus espionage actor tracked as Fire Ant expanding from its 2025 VMware

31 Aug 2026 Jeff Davies
31th August – Threat Intelligence Report

1. Executive summary Check Point's weekly intelligence report covers four items with direct operational relevance to EMEA financial services: emergency PaperCut fixes

30 Aug 2026 Jeff Davies
Turns out Brits would quite like their private messages to stay private

1. Executive summary Polling of 2,000 British adults found substantial opposition to government access to encrypted communications, including through secret orders issued to

29 Aug 2026 Jeff Davies
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

1. Executive summary Five critical vulnerabilities have been disclosed in widely deployed WordPress plugins and themes — WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP

29 Aug 2026 Jeff Davies
TerminalFix campaign deploys a reverse tunnel through multistage intrusion

1. Executive summary Microsoft reports a TerminalFix campaign using compromised websites and fake Cloudflare CAPTCHA prompts to induce users to execute clipboard-delivered PowerShell.

28 Aug 2026 Jeff Davies
Ransomware: qilin named Whitehouse (GB)

1. Executive summary On 28 August 2026, the Qilin ransomware group listed "Whitehouse" (UK; domain www.whitehouseandco.com) as a victim on

28 Aug 2026 Jeff Davies
PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE

1. Executive summary PaperCut NG and PaperCut MF are under active exploitation via a pre-authentication remote code execution (RCE) chain comprising two vulnerabilities:

28 Aug 2026 Jeff Davies
Industry that built the problem offers to sell you the solution

1. Executive summary An open letter coordinated by OpenAI and signed by 100+ technology, cybersecurity, and infrastructure companies — including Anthropic, Google, Microsoft, Cloudflare, CrowdStrike,

28 Aug 2026 Jeff Davies
Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge

1. Executive summary Nearly 130 technology and cybersecurity organisations — including OpenAI, Microsoft, Google, Anthropic, CrowdStrike, Cloudflare, Cisco, Check Point, IBM, and Oracle — have signed

28 Aug 2026 Jeff Davies
PaperCut NG/MF Critical Zero-Day Exploited in the Wild

1. Executive summary PaperCut Software has confirmed active in-the-wild exploitation of a zero-day vulnerability affecting all versions of PaperCut NG and

28 Aug 2026 Jeff Davies
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

1. Executive summary Recorded Future's Insikt Group has published details of a campaign active from late September 2025 to early April 2026

28 Aug 2026 Jeff Davies
Risky Bulletin: Two TeamPCP members arrested in Australia

1. Executive summary On 26 August 2026, the Australian Federal Police (AFP), assisted by the FBI, arrested two men in Perth, Western Australia — Ruben