219 Security Blogs

Last Updated: 02 Sep 26 04:16 UTC

Blog List | Github | OPML

2026-11-12

Dark Reading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI


2026-10-08

Dark Reading
[Virtual Event] Building a Secure AI Strategy for the Enterprise


2026-09-02

ISC SANS
ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)

Dark Reading
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency


2026-09-01

Microsoft Security
Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Krebs on Security
FBI Probes Service Selling 153M+ Drivers Licenses

Troy Hunt
Weekly Update 519: Breaches & Data Integrity

ISC SANS
Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st)

Dark Reading
Attackers Pounce on Critical Artifactory Flaw Following Disclosure

Dark Reading
Stronger Security Drives Ransomware Groups to Recruit From Within

Dark Reading
Critical Langflow Flaw Exploited as Attacks on AI Platform Rise

Dark Reading
AI Model Evaluator METR Hit by Credential Theft, Probing

MIT Technology Review
How AI plotted an interstellar journey to Alpha Centauri

Microsoft Security
Cybersecurity IR Workshop: The workshop you shouldn’t miss

Socket
Microsoft Teams Notifications Are Now Available in Socket

Schneier on Security
What’s the Scam?

Aikido
Top DSPM tools in 2026

Schneier on Security
Leaked Russian Cyber-Operations Training Materials

Malwarebytes
Fake GTA 6 leaked copy drains your crypto wallet

Jericho
Odds Are You Are Responsible for that Traffic Slowdown

GitGuardian
Credential Security: What Endpoint Protection Really Means for Secrets

ReversingLabs
How to build effective agentic SOCs: What you need to know

Aikido
The dark figure of supply chain detection

MIT Technology Review
Making the AI-powered case for legacy modernization

Dark Reading
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain

ToxSec
Security Through Obscurity Is Running Out of Time

Cloudflare
How we could save petabytes of cache storage with Zstandard and Pingora

Malwarebytes
TerminalFix looks like ClickFix, but delivers a very different payload

MIT Technology Review
The Download: engineered microbes for crops, and OpenAI’s culture problem

CISA Alerts & Advisories
Rockwell Automation Redundancy Module Configuration Tool

CISA Alerts & Advisories
Rockwell Automation Historian ME

CISA Alerts & Advisories
Rockwell Automation RSLinx Classic

CISA Alerts & Advisories
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix

CISA Alerts & Advisories
Rockwell Automation FactoryTalk Activation Manager

CISA Alerts & Advisories
Rockwell Automation Logix Platform

Wiz
Introducing Continuous Vulnerability Assessment: Real-Time Defense for the AI Threat Era

Malwarebytes
Infostealers are hijacking Claude accounts at users’ expense

Schneier on Security
Rewiring Democracy Series on The Renovator

MIT Technology Review
How engineered microbes could help feed the world’s crops

clearbluejar's Blog
Don't Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models

TrustedSec
waf-fu, or Some Log Replay Nonsense

Socket
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%

ISC SANS
ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st)

Step Security
Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners

Step Security
Introducing deny list egress policies for Harden-Runner

Datadog HQ
Visualize how CUPED adjusts experiment results with Datadog

Nebula Security
Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu

Datadog HQ
Making Rust observability reliable at scale with OpenTelemetry

Datadog HQ
From traces to experiments: A loop for improving AI agents

Rosecurify
Seclog - #193

Auth0
How to Make Your AI Agent Enterprise-Ready: Enabling Enterprise-Managed Authorization for Client Apps in Auth0


2026-08-31

Dark Reading
Anthropic Users Hit by Infostealer Attacks, Session Thefts

Socket
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat

Dark Reading
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks

Dark Reading
The Guardrails Debate: Security Researcher Changes His Mind

Hybrid Analysis Blog
Hybrid Analysis, Reengineered

ISC SANS
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)

Amazon Security
We invited a direct competitor into Security Hub Extended. Here’s why.

Schneier on Security
Is Someone Hacking DoD Refrigerators?

MIT Technology Review
The Hugging Face hack could indicate cultural issues at OpenAI

Dark Reading
AI Model Rules Are Not Security Controls

Auth0
Securing Agentic Commerce

Amazon Security
Automate IAM Identity Center governance with continuous discovery and reporting

Ars Technica Security
Think twice before installing this device promising free movies

Include Security
EncryptedSharedPreferences is Dead: Here’s What You Should Use Instead

Jericho
How Much Lipstick Can That CVE Pig Wear?

GitGuardian
AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

Malwarebytes
McKesson confirms cyber incident after ShinyHunters claims patient-data theft

Socket
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds

Bishop Fox Security
Traefik | Version Through 3.7.11

Cloudflare
Introducing Adaptive Intelligence: Undermining the economics of every bot attack

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

XBOW
How to Run an AI Application Pentesting Vendor RFP: The Evaluation Framework that actually works

Schneier on Security
Hiding Prompt Injection in Legal Filing

Malwarebytes
A week in security (August 24 – August 30)

Moonlock
8 common Fiverr scams: What they look like and how to avoid them

Moonlock
AnyDesk scams: How fraudsters turn legitimate software into a scam

ISC SANS
ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st)

Greynoise
GreyNoise + CrowdStrike: Real-Time Edge Intelligence in Falcon Next-Gen SIEM and Charlotte Agentic SOAR

Semgrep
Feeling the heat from Malicious Packages? Cool off with Cooldowns

Auth0
Type-Safe Authentication in Rust with Auth0 and Axum

Datadog HQ
Troubleshoot and secure your code faster with Datadog’s Bitbucket Cloud Source Code integration

Datadog HQ
Respond to security threats faster with Tines and Observability Pipelines

Datadog HQ
How Bits Database Optimization proves a query rewrite is faster

Fastly
Instantly AI-Agent-Ready with WebMCP on Demand

Fastly
Why SaaS and PaaS Infrastructure Leaders Are Facing 22% More Unwanted Bots


2026-08-30

ISC SANS
YARA-X 1.20.0 Release, (Sun, Aug 30th)


2026-08-29

Mend
Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions

Microsoft Security
TerminalFix campaign deploys a reverse tunnel through multistage intrusion

Binarly
MLTracer: Syscall-Based Malicious Model Detection and Labeling, with Static-Scanner Evasion Taxonomy


2026-08-28

Step Security
@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow

Aikido
Popular code generator for TanStack Query hit by supply chain worm

Schneier on Security
Friday Squid Blogging: Truckload of Squid Spills in Rhode Island

Socket
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack

Aikido
Securing Docker images

Dark Reading
Hundreds of OpenAI Agents Invaded Hugging Face Servers

Amazon Security
Extend your data perimeter to the AWS Management Console with Private Access

Dark Reading
Offensive Security Investments Surge as AI Threats Increase

ReversingLabs
Shai-Hulud worm arrests: What you need to know

Socket
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 35

Rapid7
Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

Dark Reading
You Need Cyber Deception for OT

Malwarebytes
Protect your WhatsApp account with new passkey and 2FA upgrades

Dark Reading
Defining an AI Kill Switch Is Hard, but Necessary

Socket
Socket Now Protects the Microsoft Edge Extension Ecosystem

Dark Reading
The Vulnpocalypse Is Repricing the Bug Bounty Economy

Cloudflare
BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents

MIT Technology Review
The Download: a secretive antiaging drug and joining virtual power plants

core-jmp
Process ID Mutation via BYOVD: Evading Sysmon Telemetry Through Kernel Exploitation

Malwarebytes
The AI agent swarm that attacked Hugging Face is a warning for the future

Ars Technica Security
Authorities arrest 2 alleged members of prolific hacking group TeamPCP

Schneier on Security
AI Doesn’t Mean the End of Mathematics—at Least Not Yet

Rapid7
PaperCut NG/MF Critical Zero-Day Exploited in the Wild

MIT Technology Review
How to sign up for a virtual power plant—and decide whether you should

core-jmp
I Found a KVM Guest-to-Host Heap Corruption Bug and Someone Else Got There First

ISC SANS
Some Malicious PE Stats, (Thu, Aug 27th)

ISC SANS
ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th)

Greynoise
Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets

Datadog HQ
Reduce sensitive data exposure with build-time allowlists


2026-08-27

Naveen Srinivasan
BPF Token Delegation

MIT Technology Review
A startup claims it’s found a drug to make your blood young

Dark Reading
Chinese Routers Sold Worldwide Contain Backdoors

Talos Intelligence
“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

Dark Reading
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026

Cloudflare
How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Wiz
Inside 90 days of attacks on AI infrastructure

ReversingLabs
Extend CrowdStrike Falcon with Permanent Intelligence

Amazon Security
Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK

Boschko Security Blog
UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range

Socket
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads

Microsoft Security
​​​​​​What’s new in Microsoft Security: August 2026

Github Security Blog
OpenClaw went viral. Meet the maintainers building and securing it.

Wiz
From Concept to Context Engine: How Wiz Built AI-Powered Data Discovery

Malwarebytes
Flock wants privacy to meet surveillance halfway

GitGuardian
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

Malwarebytes
Fake listings can turn trusted platforms into scam springboards

XBOW
Continuous Attack Surface Testing vs Penetration Testing: Key Differences

Ars Technica Security
Claude, Codex, and Hermes installed unowned code inside corporate networks

Rapid7
Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs

Ars Technica Security
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face

Malwarebytes
Fake Apple Pay charge brings the classic tech support scam to your phone

MIT Technology Review
The Download: inside OpenAI’s Hugging Face hack, and a new EV takes on the US

Wiz
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps

CISA Alerts & Advisories
All-Line Equipment Company Fuel-Boss

CISA Alerts & Advisories
Rockwell Automation OTTO Fleet Manager

CISA Alerts & Advisories
Applied Systems Engineering ASE2000 V2 Communications Test Set

CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Xiiaozet LK100W

CISA Alerts & Advisories
Mitsubishi Electric Multiple FA Products (Update D)

CISA Alerts & Advisories
Ebyte NA111-M

CISA Alerts & Advisories
Mitsubishi Electric CNC Series (Update A)

Aikido
Good riddance, TeamPCP. Now for the hard part.

Dark Reading
Russian Hackers Phish EU Officials Over Messaging Apps

Krebs on Security
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Malwarebytes
New Instagram and Facebook rules set a default two-hour limit for teens

Talos Intelligence
JavaScript obfuscation: From party trick to phishing kit

MIT Technology Review
Is Slate Auto’s new electric truck the EV Americans need?

ISC SANS
A polymorphic phishing page (that occasionally breaks itself), (Thu, Aug 27th)

Schneier on Security
LLM-Based Social Engineering Scams

core-jmp
SLEEPWALKER: A Passive Backdoor With Its Own Command Language

core-jmp
Two Bytes to RCE: Chaining nginx rift and PoolSlip into an ASLR-Independent Exploit

Embrace The Red
Breaking Claude Code Opus 5 Auto Mode

Step Security
Dev Machine Guard Now Inventories Where Developer Credentials Live

Step Security
Dev Machine Guard Now Inventories Browser Extensions on Developer Machines

ISC SANS
ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)

Datadog HQ
What we learned about AI agent security by monitoring our agents

Datadog HQ
Debug live production code without redeploying with Datadog Live Debugger

Himanshu Anand
a fake resume invoked China's defence-tech elite, then installed VShell

Nebula Security
Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

Semgrep
Semgrep Multimodal Goes Beyond Authentication: What we learned from Comparing it with Mythos


2026-08-26

Dark Reading
Dark Caracal Adds New Malware to Cyber Espionage Arsenal

Dark Reading
'HTTP Terminator' Hunts for Novel Desync Attacks

Amazon Security
ICYMI: July 2026 @AWS Security

Dark Reading
Red Flags That Expose Fake North Korean IT Workers

Socket
Socket for ClickUp Is Now Available

core-jmp
Static Devirtualization of Tencent VM: Breaking ACE Anti-Cheat Obfuscation with Guided Symbolic Execution

Amazon Security
Detecting multi-stage attacks on AWS: A guide to cross-service signal correlation

Dark Reading
Android Malware Hijacks Update System for Car Head Units

Microsoft Security
When AI infrastructure becomes the target: Securing gateways and control points

Wiz
Democratizing FinOps with Wiz: Driving Cost Attribution with the Wiz Service Catalog

Aikido
Top Minimus alternatives in 2026

Mend
The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right

Wiz
The State of Cloud Risk 2026: Most Security Findings Aren’t Real Attacker Opportunities

ReversingLabs
Infostealers highlight malware-as-a-service trend

Eclypsium
AI Infra Summit 2026

ToxSec
The AI Supply Chain Is Getting Weird [Monthly Guest Post]

Malwarebytes
Update Chrome before you browse again

Bishop Fox Security
A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console

SentinelOne
Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who’s Exploiting Your Perimeter

Malwarebytes
Popular school apps may be sharing student data with advertisers

Schneier on Security
Spyware for Babies

CISA Alerts & Advisories
CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
CISA Vulnerability Review

Dark Reading
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month

Trail of Bits
VMs won't contain cyber-capable agents

Escape DAST
LLM security testing: how to pentest LLMs and MCP servers

Aikido
Software supply chain security requires decisions rather than defaults

Aikido
Aikido Security achieves ISO 42001:2023 certification for AI governance

Talos Intelligence
Choose your fighter: Balancing competing requirements to select models for your AI SOC

Aikido
Aikido launches agentic pentesting for Android apps

Dark Reading
Interpol's Jackal IV Disrupts West African Crime Infrastructure

Dark Reading
Nigeria Looks to Sovereign Cloud for Cyber, National Security

Malwarebytes
Beware of fake Indeed interview apps used to install spyware

Elttam
Ruby Marshal Kick-off Gadgets - elttam

Elttam
Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam