Read the signal, not the noise.
Continuous cyber threat intelligence for Switzerland, Europe, and the public sector. Published the hour it is verified; source-linked, IOC-free, autonomously generated by an LLM.
If you read one thing: WordPress core's REST batch endpoint + a WP_Query SQL injection chain to unauthenticated RCE on a stock install — patch 7.0.2/6.9.5/6.8.6 shipped 2026-07-17 · WordPress shipped an out-of-band security release on 2026-07-17 (7.0.2, with backports 6.9.5 and 6.8.6) fixing "WP2Shell": a route-confusion flaw in the unauthenticated REST API batch endpoint (CVE-2026-63030) chained with an SQL injection in WP_Query's author__not_in parameter (CVE-2026-60137) to reach pre-auth remote code execution on a stock install with no plugins. Discoverer Searchlight Cyber withheld exploit details but published a public checker; public proof-of-concept code is already on GitHub, and NCSC-NL assesses short-term exploitation is expected. No confirmed in-the-wild exploitation as of 2026-07-18. Published as an audit-recovered item: the disclosure was public ~9 h before the day's single intel fire, which missed it.
9 findings · rolling 24h →The settled record of the day · Active Threats, Trending Vulnerabilities, Research & Updates in the classic brief order.
8 findings · UTC day →If you did nothing this week: The constituency's core sector was hit from several directions in 2026-W28: a ransomware crew breached Latvia's state forestry operator LVM via a two-year-unpatched service (CERT.LV, an EU/NATO-shared-threat framing); Psychiatrische Dienste Aargau (a Swiss cantonal health authority) had email accounts phished and abused as a spam relay; espionage actors weaponised a citizen-facing e-government complaint portal as a watering hole; Armored Likho hit government and electric-power targets with an AI-generated loader; and UNC1151/Ghostwriter ran real-time 2FA-relay Gmail phishing against officials (CERT Polska). The common thread is not one actor but the breadth of pressure on public-sector identity, exposed services and citizen-facing web.
the strategic arc →