Briefing — 29 October 2026
DHS 41K worker leak, Node2Shell in CISA KEV, Oracle EBS under active scanning, Volt Typhoon Silent Train, Barracuda hits Fehmarnbelt tunnel. 12 ransomware victims.…
Briefing — 28 October 2026
UEFI TianoCore RCE (CVSS 9.5) affecting most servers globally; PHP2Shell on CISA KEV with Thursday federal deadline; UNM Health day 2; Tailscale Tailworm SSH flaws; Bristol City Council hit by ransomware; 22 victims across 7 groups.…
Briefing — 27 October 2026
PHP2Shell exploited in the wild. Emergency Brotli patches. UNM Health System diverts patients. 41 ransomware victims across 13 groups.…
Briefing — 26 October 2026
PHP2Shell critical RCE, Mirai botnet joins attacks, Broccoli2Shell, Lazarus Operation FlashHole, PAYLOAD ransomware via AD GPO.…
Weekly Security Roundup — week ending October 25th, 2026
BlackX UEFI bootkit, autonomous AI attack agents, ransomware at scale, and the NCSC on agentic AI safeguards.…
Briefing — 25 October 2026
BlackX UEFI bootkit bypasses Secure Boot; AI attack agent operates in Skynet mode; Tailscale vulnerabilities; Castle Howard Estate hit by Qilin. 22 ransomware victims across 8 groups.…
Briefing — 24 October 2026
PHP2Shell third bug (no patch), OpenAI monitoring failure exposed, Quest Diagnostics patient data breach, Ukraine drones hit Russian data centres, Arista VCO and Collabora CISA KEV deadlines. 60 ransomware victims across 21 groups.…
Briefing — 23 October 2026
56 ransomware victims including PwC UK (Everest) and Kirkland & Ellis (SilentRansomGroup). PHP2Shell exploitation began 4 days pre-patch; 32 UK gov services offline. Storm-0940/ARTEX hit 2,250 M365 tenants. GitLab max-severity RCE, Arista VCO zero-day actively exploited, 333 Tor exit nodes hijacked.…