Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Dark Reading reports that phishing emails using an Anthropic theme, described as carrying numerous obvious red flags, are reaching recipients through
1. Executive summary Microsoft reports that North Korean operators are using generative and agentic AI to accelerate reconnaissance, job-themed social engineering, fraudulent worker
1. Executive summary CrowdStrike OverWatch reported on 2026-10-29 that VAPOR PANDA used the ARTEX agentic framework, run primarily on the Chinese DeepSeek
1. Executive summary CrowdStrike has published a new version of its Prompt Injection Taxonomy, now at 222 techniques, adding four named methods that target
1. Executive summary Cisco Talos has published research on NIK C2, a Go-based 64-bit Windows implant that embeds an OpenAI API client
1. Executive summary Insikt Group (Recorded Future) reports that three Russian-language traffer teams, AtlasCore, PolyFucked and Magnetic Team, have since spring 2026 adapted
1. Executive summary CrowdStrike reports that a China-nexus group it tracks as Warp Panda used an insufficient-logging flaw in Broadcom VMware ESX,
1. Executive summary Siemens published SSA-137528 on 2026-10-26, republished by CISA on 2026-10-29 as ICSA-26-302-01, covering
1. Executive summary Hitachi Energy has published two vulnerabilities in its TRO600 series products that can be exploited for remote code execution and disclosure
1. Executive summary Hitachi Energy has published PSIRT advisory 8DBD000258, republished verbatim by CISA as ICSA-26-302-03, covering two vulnerabilities in the
1. Executive summary Defused reported on 27 October 2026 that its Oracle E-Business Suite decoys recorded exploratory exploitation attempts against CVE-2026-101767,
1. Executive summary Cisco Talos Incident Response reports that ransomware and pre-ransomware incidents rose to 27 percent of its Q3 2026 engagements, up