Weekly Threat Roundup
The full week in one comprehensive read.
Oct 19 – Oct 25, 2026
Read latest roundup Today's Brief
Two briefings a day — morning and evening.
Get the full story, or explore it in audio and video formats.
All times in your local time (CET) Last updated: 05:12
PRIMARY BRIEF
START HERE
Morning Brief
October 27, 2026•07:30 LATEST HIGH
ThreatNoir Morning Brief — October 27
~1 min read 35 IOCs
Updated 6h ago
LATER TODAY
Evening Brief
October 26, 2026•18:00MEDIUM
ThreatNoir Afternoon Brief — October 26
~1 min read 6 IOCs
QUICK SCAN — Overnight Activity
Key developments from the past 12 hours.
1
Gheist campaign abuses stolen GitHub tokens to dump private repo and cloud secrets via Actions logs
HIGH5h ago
2
Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
HIGH1d ago
3
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
HIGH1d ago
EXPLORE THIS BRIEFING
Different ways to consume today's brief.
RED VS BLUE
Gheist Turns GitHub Tokens Into Secret Pipelines
Gheist malware compromised 850 GitHub accounts by exploiting overpermissioned personal access tokens to inject malicious workflows and exfiltrate cloud credentials at scale.
Watch breakdown
SHORT
2 stories in 60 seconds
Quick overview of today's
key events.
Watch on YouTube
IOCs
Search indicators from today's briefs.
Events
Upcoming webinars and industry events.
Feed
All high-impact articles in one place.
Legal
Terms, privacy, and editorial policy.
Get the weekly roundup
The week in security, every Sunday. No spam. Unsubscribe anytime. Privacy
Prefer a feed reader? Follow by RSS
Indicators of compromise (IOCs) and source links are included in each full brief.