Security Feed

1. Executive summary Trail of Bits reports that, by October 29, 2026, a Codex-assisted workflow helped deliver fixes for 149 distinct CVEs into

1. Executive summary Ivanti updated its Connect Secure advisory on 2026-10-29 to add CVE-2026-111357 and CVE-2026-118527 and released

1. Executive summary Chainalysis, a blockchain analysis vendor whose products are used by financial institutions for transaction monitoring and crypto investigations, confirmed that an

1. Executive summary Cisco Talos has documented a Windows infostealer it names VOLTA-AUTODOXER (VOLTA) that, after harvesting credentials, cookies, payment cards, cryptocurrency wallet

1. Executive summary Kaspersky's Cyber Threat Intelligence team has published an investigation of a campaign in which an open-source framework, CyberStrikeAI,

1. Executive summary CISA has added two Ivanti Connect Secure flaws to its KEV catalog: CVE-2026-111357, a missing authentication for critical function

1. Executive summary Sophos reports that the group behind the Aur0ra ransomware, which it tracks as GOLD OGRE, used AI coding agents to map

1. Executive summary On 2026-11-01 the leak-site operator Whitearmor published an entry claiming a complete data dump from a GoDaddy instance

1. Executive summary On 2026-11-01 the Qilin ransomware group listed a German entity, qc-consult, on its leak site, as indexed by

1. Executive summary On 2026-11-01 the ransomware leak-site index ransomware.live published an entry, attributed to the operator calling itself Dire

1. Executive summary Google Threat Intelligence Group (GTIG) and Mandiant report that since late August 2026 multiple threat actors have used the open-source,

1. Executive summary On 29 October 2026 attackers moved roughly $6.3 to $6.4 billion in virtual assets out of Binance wallets across