Evidence-led cyber threat intelligence for defenders. Incident reports, actor profiles and vulnerability analysis — written for the people who have to act on it.
CVE-2026-20841 is a high-severity command injection flaw in the modern Windows Notepad (Microsoft Store) application that can result in arbitrary code execution in the context of the logged-in…
Microsoft’s February 2026 Patch Tuesday shipped fixes for 58 vulnerabilities , including six zero-days confirmed as actively exploited and three publicly disclosed issues. Microsoft also fixed…
A widespread data-theft and extortion campaign has targeted organisations’ Salesforce environments by abusing trusted third-party integrations and malicious OAuth “Connected Apps” —rather than…
Notepad++’s update mechanism (WinGUp) was abused in a targeted supply-chain compromise in 2025, where certain users’ update traffic was selectively redirected to attacker-controlled infrastructure…
Microsoft’s January 2026 Patch Tuesday security release shipped fixes for 114 vulnerabilities , including three zero-days (one actively exploited ) and eight Critical issues. The bulk of the fixes…
The SolarWinds breach (often tracked as SUNBURST by Mandiant/FireEye and Solorigate by Microsoft) was a landmark software supply-chain compromise in which adversaries trojanised signed SolarWinds…
In November 2025, multiple enterprise breach investigations identified Oracle E-Business Suite (EBS) as a deliberate and repeated intrusion target. Analysis of affected environments indicates…
Security researchers have disclosed high-to-critical vulnerabilities across several widely used Visual Studio Code (VS Code) extensions—reported to total 128M+ installs —that could enable local…
In October 2025, multiple threat intelligence and government sources reported active exploitation of a critical, unauthenticated remote code execution vulnerability in Oracle E-Business Suite…
Microsoft and CERT/CC have disclosed five vulnerabilities in Paragon Software’s BioNTdrv.sys kernel-mode driver used across the Hard Disk Manager / Partition Manager product line, enabling local…
In late August 2025, Jaguar Land Rover (JLR) suffered a major cyber incident that triggered a precautionary shutdown of internal IT systems and a prolonged disruption to global manufacturing…
On Monday 24 November 2025 , multiple London borough councils—most prominently the Royal Borough of Kensington & Chelsea (RBKC) , Westminster City Council , and the London Borough of Hammersmith &…
