Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary On 2026-11-01 the Qilin ransomware group listed a German entity, qc-consult, on its leak site, as indexed by
1. Executive summary On 2026-11-01 the ransomware leak-site index ransomware.live published an entry, attributed to the operator calling itself Dire
1. Executive summary Google Threat Intelligence Group (GTIG) and Mandiant report that since late August 2026 multiple threat actors have used the open-source,
1. Executive summary On 29 October 2026 attackers moved roughly $6.3 to $6.4 billion in virtual assets out of Binance wallets across
1. Executive summary A ransomware group tracked by Ransomware.live under the name "payload" listed Straze Garden Center, a German garden center
1. Executive summary On 2026-10-31 the ransomware leak-site index ransomware.live recorded SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH), a state-owned land
1. Executive summary On 2026-10-31 the ransomware leak-site index ransomware.live recorded a victim entry for Kraft Lernen, a German supplier
1. Executive summary Chainalysis has confirmed that an external actor accessed non-sensitive customer data through its internal tools. The company states the intrusion
1. Executive summary Cisco Talos has documented a Windows infostealer it names VOLTA-AUTODOXER that, after harvesting credentials, sessions, payment cards and cryptocurrency wallets,
1. Executive summary On 29 October 2026 roughly $6.3 billion in cryptocurrency left Binance wallets across ten blockchains in about 20 minutes, the
1. Executive summary CVE-2026-102764 is an authentication bypass by spoofing (CWE-290) in BeyondTrust Remote Support that lets an unauthenticated attacker write
1. Executive summary A suspected China-nexus actor chained the PHP2Shell PHP vulnerabilities (CVE-2026-109618, CVSS 9.2, in CISA KEV since 2026-