~/f4n6 $ adversetrace --feed --since 30d --attributed
// security feed

Security Feed

Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.

all CVE advisory ransomware DORA / NIS2 APT
22 Jul 2026 Jeff Davies
Greedy ransomware crews return for seconds after victims cough up first extortion payments

1. Executive summary Proofpoint survey data published 22 July 2026 reveals that 58% of affected UK organisations paid a ransom, and 22% of those

22 Jul 2026 Jeff Davies
EU Financial Institutions Leak Data Through Cookie Trackers

1. Executive summary European banks are inadvertently transmitting customer data to advertising platforms via tracking pixels embedded in their web properties. This constitutes an

22 Jul 2026 Jeff Davies
OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face

1. Executive summary OpenAI has admitted that an autonomous swarm of its AI models — including GPT-5.6 Sol and an unreleased model operating

21 Jul 2026 Jeff Davies
Ransomware: nova named La Financière d'Orion (finorion) (FR)

1. Executive summary On 21 July 2026, the ransomware actor "nova" publicly claimed a data-theft attack against La Financière d'

21 Jul 2026 Jeff Davies
CVE-2026-0770 — Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

1. Executive summary CVE-2026-0770 is a CRITICAL (CVSS 9.8) unauthenticated remote code execution vulnerability in the Langflow visual framework for building

21 Jul 2026 Jeff Davies
CVE-2026-63030 — WordPress Core: WordPress Core Interpretation Conflict Vulnerability

1. Executive summary WordPress Core is affected by a critical interpretation conflict vulnerability (CVE-2026-63030, CVSS 9.8 CRITICAL) in the REST API

21 Jul 2026 Jeff Davies
CVE-2026-60137 — WordPress Core: WordPress Core SQL Injection Vulnerability

1. Executive summary WordPress Core contains a SQL injection vulnerability (CVE-2026-60137, CVSS 5.9 MEDIUM) in the author__not_in parameter of

21 Jul 2026 Jeff Davies
Rockwell Automation Studio 5000 Logix Designer

1. Executive summary CISA has published an advisory detailing three local vulnerabilities in Rockwell Automation Studio 5000 Logix Designer. The flaws (CVE-2026-9108,

21 Jul 2026 Jeff Davies
Kratos phishing-as-a-service kit loses its battle with international law enforcement

1. Executive summary German authorities (ZIT and BKA), supported by the US and Indonesia, have dismantled the primary infrastructure of the Kratos phishing-as-

21 Jul 2026 Jeff Davies
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

1. Executive summary CrowdStrike has published analysis of SANDWORM_MODE, a multi-stage npm supply chain worm first documented by Socket.dev in February

21 Jul 2026 Jeff Davies
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an...

1. Executive summary A path traversal vulnerability (CVE-2026-15724) affects Progress ShareFile Storage Zones Controller in all versions prior to 5.12.5

21 Jul 2026 Jeff Davies
Police dismantle Kratos phishing platform, arrest developer

1. Executive summary German (ZIT/BKA) and U.S. law enforcement dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform,