Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary In July 2026, a UK power plant was shut down for four days by a cyber attack attributed to Iran-linked
1. Executive summary Fortra's threat intelligence unit (FIRE) has documented a phishing technique dubbed "Chameleon SEO Poisoning" that uses SEO-
1. Executive summary AI agents can accelerate reconnaissance, vulnerability discovery, exploit-chain development, network mapping and sensitive-file identification while introducing privileged non-human
1. Executive summary CVE-2026-73570 is a HIGH-severity OS command injection vulnerability (CVSS 8.9, CWE-78) in Synacor Zimbra Collaboration Suite
1. Executive summary U.S. Bancorp (7th-largest U.S. bank) stated that LockBit ransomware gang claims of data theft are attributable to a
1. Executive summary A new phishing-as-a-service (PhaaS) toolkit dubbed iAuthFlow V2, first advertised on a Russian-language cybercrime forum at $10,
1. Executive summary On 21 August 2026, the ransomware operator "thegentlemen" publicly claimed a compromise of dlp motive (dlp-motive.de), a
1. Executive summary A critical type confusion vulnerability in the isolated-vm Node.js library (GHSA-864f-rcv7-6rh4) enables sandboxed JavaScript to escape
1. Executive summary On 21 August 2026, the ransomware actor "direwolf" publicly listed Reviso Cloud Accounting Limited (DK; domain reviso.com) as
1. Executive summary Microsoft has confirmed active in-the-wild exploitation of CVE-2026-69836, a CVSS 10.0 CRITICAL remote code execution vulnerability
1. Executive summary A SANS Internet Storm Center (ISC) diary entry details practical techniques for querying Microsoft Entra ID (formerly Azure AD) sign-in
1. Executive summary CVE-2026-72529 is a missing-authentication vulnerability in TrueConf Server that permits a remote, unauthorised attacker with network access to