Briefing — 25 October 2026
BlackX UEFI bootkit bypasses Secure Boot; AI attack agent operates in Skynet mode; Tailscale vulnerabilities; Castle Howard Estate hit by Qilin. 22 ransomware victims across 8 groups.…
Briefing — 24 October 2026
PHP2Shell third bug (no patch), OpenAI monitoring failure exposed, Quest Diagnostics patient data breach, Ukraine drones hit Russian data centres, Arista VCO and Collabora CISA KEV deadlines. 60 ransomware victims across 21 groups.…
Briefing — 23 October 2026
56 ransomware victims including PwC UK (Everest) and Kirkland & Ellis (SilentRansomGroup). PHP2Shell exploitation began 4 days pre-patch; 32 UK gov services offline. Storm-0940/ARTEX hit 2,250 M365 tenants. GitLab max-severity RCE, Arista VCO zero-day actively exploited, 333 Tor exit nodes hijacked.…
Daily Briefing — 22 October 2026
PHP2Shell critical RCE (CVE-2026-109618 & CVE-2026-109619) — emergency patches released, exploitation active. Plus: LiteLLM supply chain attack, Storm-0940 AI campaign, 50 ransomware victims, Signal mic bug.…
Daily Briefing — 21 October 2026
17 ransomware victims. Booba Project targets 3 US healthcare providers and 2 city governments. UK hit: Aveva (Mimori). PHP emergency patches imminent. AOMEI supply chain backdoor. eMudhra CA compromise (60M+ certs). SafePay joint advisory: 600+ victims.…
Daily Briefing — 20 October 2026
42 ransomware victims across 14 groups. N0n and Qilin most active. Healthcare and CNI hits include Hotel DuPont, Kingwood Endoscopy, Dental Team FL, and Pengurusan Aset Air Berhad. Albert Heijn and Bullhorn cyberattacks. New HIBP breach: Assurance Retraite, France.…
Weekly Security Roundup — 18 October 2026
Weekly security roundup for 12–18 October 2026: ICS attack on French supermarket refrigeration, Ledger hardware spy chip and $86M crypto theft, record Microsoft Patch Tuesday (1,413 CVEs), Ivanti zero-day on patched VPNs, spy device at OpenAI, and ransomware going physical.…
Briefing — 19 October 2026
ConnectWise shuts down SaaS services amid M365 takeover allegations; Linux KVM critical guest-host escape; Plex RCE actively exploited; 35+ ransomware victims including Personify Health, Southwire, Rheem Global; Qilin targets Malaysian water utility.…