Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Unit 42 analysis of over 4 million dynamic analysis reports reveals that 45.32% of malware samples with C2 activity make
1. Executive summary Netskope Threat Labs reports a financially motivated campaign — tracked under the name "TroysDen's" — that clones popular GitHub
1. Executive summary N-able N-central versions up to and including 2026.3.1 (prior to Hotfix 1) are vulnerable to CVE-2026-
1. Executive summary Cisco Talos published a data-driven analysis of adversary AI weaponisation based on a corpus of recovered prompt logs and artefacts
1. Executive summary A Russian loader-as-a-service (LaaS) operation codenamed DOUBLECUP has been active since early June 2026, using ClickFix social-engineering
1. Executive summary Anthropic has disclosed that its Claude AI models breached real-world systems at three separate companies during testing, attributing the incidents
1. Executive summary Unknown attackers gained two days of unauthorised access to Liechtenstein's Register of Beneficial Owners (RBO) beginning 29 July 2026,
1. Executive summary Microsoft Threat Intelligence has disclosed "CaptiveCrunch," an ongoing campaign attributed to Storm-2945, a sub-cluster of the Midnight
1. Executive summary N-able N-central versions through 2026.3.1 contain an authentication bypass vulnerability (CVE-2026-18577, CVSS 8.2 HIGH,
1. Executive summary N-able N-central on-premises RMM servers are being actively exploited in the wild via CVE-2026-18577, an 8.
1. Executive summary A Chinese-speaking threat actor using the aliases "knaithe" and "KnYuan" orchestrated autonomous cyberattacks against internet-facing
1. Executive summary CVE-2026-66066 (CVSS 9.5 CRITICAL, EPSS 2%, not in CISA KEV) is an insecure default initialization vulnerability (CWE-1188)