Security Feed

1. Executive summary On 30 October 2026 a VulnCheck canary recorded an attacker exploiting CVE-2026-58115, a missing-authentication flaw in the Node-

1. Executive summary Brazilian cryptocurrency exchange Mercado Bitcoin suspended all deposits and withdrawals after a cybersecurity incident on Monday morning, and blockchain security companies

1. Executive summary Microsoft published a data-driven analysis of its tracked CVE catalog covering disclosures from 1999 through September 2026: of roughly 383,

1. Executive summary On 2026-11-02 the Akira ransomware group listed Usnext (U.S.NEXT), a web development and IT services provider with

1. Executive summary Mandiant reports multiple 2026 intrusions in which financially motivated clusters hijacked enterprise access to large language models, a tactic it calls

1. Executive summary Mandiant incident responders documented multiple 2026 intrusions in which financially motivated actors hijacked enterprise access to large language models, a tactic

1. Executive summary The HYFLOCK ransomware group listed Ateşsan Ambalaj A.Ş., a Turkish corrugated packaging manufacturer founded in 1972, on its leak site

1. Executive summary On 2026-11-02 the ransomware leak-site index ransomware.live recorded a listing in which the group calling itself safepay

1. Executive summary A database password embedded in Applebee's Android app gave researcher Robert Wiggins access to an internal Applebee's

1. Executive summary A second wave of attacks on internet-exposed refrigeration control systems has spoiled chilled and frozen food at supermarkets in Belgium,

1. Executive summary Google and industry partners dismantled the XCPE backdoor, which had enrolled more than 1.3 million set-top boxes into a

1. Executive summary Palo Alto Networks Unit 42 has disclosed a cyber espionage campaign targeting Linux infrastructure associated with government entities and state-affiliated