Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Version 2.1.313 of the official Anthropic Claude Code VS Code extension (anthropic.claude-code) was published to the Open-
1. Executive summary The aurora ransomware group listed Rapid Manufacturing, a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada,
1. Executive summary SOCRadar found a publicly accessible Python HTTP file server belonging to an operator of the n0n ransomware group, hosted in Sweden
1. Executive summary The Qilin ransomware group listed Palletline, a UK palletised freight distribution network, on its leak site on 2026-10-30. The
1. Executive summary Eight intermediate CA private keys issued by Indian certificate authority eMudhra were generated with between three and eight bits of entropy,
1. Executive summary CVE-2026-118527, a predictable-identifier flaw in Ivanti Connect Secure (CVSS 8.6 HIGH, CWE-290), was added to CISA
1. Executive summary CVE-2026-111357, a missing authentication for critical function flaw in Ivanti Connect Secure (CVSS 7.0, HIGH, CWE-829), was
1. Executive summary Microsoft Threat Intelligence has documented two human-operated intrusions in which attackers impersonated IT help desk staff over Microsoft Teams, talked
1. Executive summary Version 2.1.313 of Anthropic's official Claude Code VS Code extension (anthropic.claude-code) was published to the
1. Executive summary A group calling itself Department of Peace says it used a US Department of Homeland Security single sign-on account, provided
1. Executive summary Germany's BSI published advisory WID-SEC-2026-4240 on 30 October 2026, rated hoch (high), covering multiple vulnerabilities in
1. Executive summary Russian home goods retailer Poryadok, which runs 48 stores across 32 cities, has had its website, mobile app and physical stores