Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary A race condition in the WordPress Core update process was patched on 28 October 2026 in WordPress 7.1.4 and
1. Executive summary Drupal has warned that threat actors are actively exploiting CVE-2026-118539, a missing authorization flaw in the Commerce Core module
1. Executive summary Binance has disclosed a theft of roughly $6.3 billion in cryptocurrency across ten blockchains, the largest crypto heist on record
1. Executive summary TeamViewer has patched CVE-2026-111585, an integer overflow in the remote-control screen processing component of its clients on Windows,
1. Executive summary CISA added CVE-2026-97229, an integer overflow in GitLab Community Edition and Enterprise Edition, to its Known Exploited Vulnerabilities catalog
1. Executive summary Cisco Talos Incident Response (Talos IR) reports that through Q3 2026 attackers impersonated IT help desk staff by phone, email and
1. Executive summary On 2026-10-29 the Shiba ransomware group listed Antwerp House Dentistry, a UK dental practice, on its leak site, as
1. Executive summary Binance has reported a security incident affecting about $6.3 billion in assets, with close to $3 billion frozen on-chain
1. Executive summary Forever Security has published five vulnerabilities in AI developer tools (Cursor, GitHub Copilot, Anthropic Claude Desktop, Microsoft VS Code, OpenAI Codex)
1. Executive summary A suspected Chinese actor used a custom, non-public implementation of the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619,
1. Executive summary On 2026-10-29 the Qilin ransomware group listed W Interactive, a UK-registered victim, on its leak site, as indexed
1. Executive summary CVE-2026-76418 is a NULL pointer dereference in the Remote Access SSL VPN service of Cisco Secure Firewall ASA and