Security Feed
Curated advisories, threat briefs & field intel — attributed, dated & severity-tagged. Kept deliberately separate from my own writing.
1. Executive summary Belgium's Federal Public Service Finance (FPS Finance) has taken MyMinfin, the country's main online tax and financial
1. Executive summary Lumen Black Lotus Labs has documented Silent Train, a covert relay network that Volt Typhoon (MITRE G1017) assembles from compromised SOHO/
1. Executive summary BSI's Warn- und Informationsdienst published WID-SEC-2026-4188 on 2026-10-29 at severity "mittel" (medium)
1. Executive summary BSI's Warn- und Informationsdienst published WID-SEC-2026-4187 on 2026-10-29 covering multiple vulnerabilities in Red Hat
1. Executive summary CISA added CVE-2026-41709, an insufficient-logging flaw in VMware ESXi rated CVSS 2.7 LOW (CWE-778), to the
1. Executive summary Kaspersky has published analysis of NetamLoader, a .NET assembly-loading framework delivered through a tampered Patch My PC update package that
1. Executive summary Dark Reading reports that researchers cannot explain why cyber threats in Italy differ from those seen elsewhere, and the item carries
1. Executive summary This item is a SANS Internet Storm Center diary by Xavier Mertens describing how to deploy a local Ghidra Server to
1. Executive summary A command injection flaw in the npm package systeminformation version 5.33.15 lets a crafted string passed to services() run
1. Executive summary ESET's Q2-Q3 2026 APT report records a rise in Middle East-aligned activity, with FilthyFeline (an OilRig subgroup)
1. Executive summary A local file inclusion (LFI) flaw in the esm.sh service URL handling lets an unauthenticated, remote attacker craft a request
1. Executive summary Cisco Talos has attributed historical intrusions against Cisco Catalyst SD-WAN Controller deployments to an actor it tracks as UAT-11473,