2026-10-19
Ars Technica Security
PSA: Patch your Plex media server before someone hacks it
MIT Technology Review
Making the internet better for AI agents might make it worse for everyone else
MIT Technology Review
“We were looking at it wrong”: The explosive claim that’s upended the AI world
Meta Security
GenRecs Tokenization: Transforming Ads Recommendation at Meta with Stable Model Vocabulary
Meta Security
The Thin Orchestrator: How We Made Our AI Agents More Reliable by Giving the Router Less to Do
Rapid7
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Microsoft Security
Agents are your newest insiders. Security must move at their speed.
MIT Technology Review
The Download: preserving the Arctic permafrost, and playful AI agents
Schneier on Security
Training AIs to Solve CAPTCHAs
MIT Technology Review
Inside the quest to combat Arctic fires and save the planet’s frozen carbon
MIT Technology Review
AI researchers stranded Claude on a virtual desert island. It started to “play.”
MIT Technology Review
How far can we push computing?
Malwarebytes
A week in security (October 12 – October 18)
Rosecurify
Seclog - #200
2026-10-18
2026-10-17
2026-10-16
Schneier on Security
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Ars Technica Security
OpenAI models hacked a crypto wallet and breached more websites
Dark Reading
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Filippo Valsorda
The NIST Elliptic Curves Seeds Bounty Has Been Claimed
Dark Reading
AI Takes Control of Robotic Arm in 16 Minutes Flat
Artem Golubin
The future of the internet could be paywalls
MIT Technology Review
Roundtables: A Conversation With the Creator of AI-Designed Viruses
Microsoft Security
Managing open-weight model risk in enterprise deployments
The Citizen Lab
The Lawful Access Act’s threats to Canada’s national security
Cloudflare
Continuous accountability for Verified bots
MIT Technology Review
The Download: failed social media bans, and extending pets’ lives
CISA Alerts & Advisories
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Alerts & Advisories
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
CISA Alerts & Advisories
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Schneier on Security
Backdooring Open-Weight AI Models
Malwarebytes
OpenAI sued over children safety and data use
MIT Technology Review
This implant can restore sight for patients with macular degeneration
MIT Technology Review
Love is infrastructure
Joshua Rogers
RCE (kind of) in Transmission BitTorrent’s daemon
2026-10-15
Ars Technica Security
Targeted ads delivered 0-click exploits to install mercenary malware
Artem Golubin
Python's binary wheels and supply chain attacks
Meta Security
How Meta Built Forum With AI-Native Engineering
Black Lantern Security
IIS Shortname Enumeration in the Big ‘26
Talos Intelligence
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Google Safety & Security
Check if a text message is a scam using Circle to Search.
Cloudflare
A fully programmable secure web gateway
Schneier on Security
Measuring Human Cryptanalysis Effort
Amazon Security
AWS Security Agent (now part of AWS Continuum) exploited 33 of 37 new real-world CVEs
Meta Security
Sapienz Receives ISSTA 2026 Impact Paper Award
Cloudflare
Deploy with Void
Bishop Fox Security
AI Security Scoping: Define What To Test In Your Deployment
CISA Alerts & Advisories
Eclipse Foundation Eclipse Milo
CISA Alerts & Advisories
Thermo Fisher Torrent Suite Software
CISA Alerts & Advisories
J4Care dcm4che
CISA Alerts & Advisories
Guangzhou Juan IoT Technology EseeCloud
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
CISA Malcolm
Eye Security Research
Cooldown or compromise: the three-day rule for npm and PyPI
Star Labs
YuanKong RAT: the Android remote-control service that stamps its operators' names into every build
Sansec Threat Research
BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)
2026-10-14
Black Hills Info Sec
The Threat Hunting Flywheel: Why Threat Hunting Isn’t About Finding Bad Things
Ars Technica Security
Fridge hack costing millions and sparking fires stemmed from poor security
Amazon Security
Penetration testing every deployment with AWS Continuum
Black Lantern Security
CVE-2026-79957 Insecure Direct Object Reference in ServiceNext
Schneier on Security
Upcoming Speaking Engagements
Schneier on Security
The Future of AI Cryptanalysis
Krebs on Security
U.K. Sanctions Cryptomus for RU Money Laundering
Schneier on Security
Cyberattack on Connected Fridges in France
Talos Intelligence
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
core-jmp
HDD Firmware Hacking Part 1
GitGuardian
Why We Built the Good Samaritan Program
Bishop Fox Security
Behind Closed Doors: How Physical Penetration Testing Secures Sensitive Conversations
Microsoft Security
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Ars Technica Security
Anthropic warns small AI models could self-replicate through IoT devices
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Trail of Bits
Package managers have an integrity problem
Scott Helme
Passkeys Are Not a Trap
Palo Alto Networks
The Blind Spot in Orbit: Why Space Could Be the Next Infrastructure Crisis
2026-10-13
Krebs on Security
Microsoft Patches More Than 1,400 Security Flaws
Rapid7
Patch Tuesday - October 2026
Dark Reading
North Korea Phishes Ukrainians for War Intel
Amazon Security
Part 2 – Cybersecurity journeys: What even is this job?
Talos Intelligence
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Dark Reading
Anthropic Finds Ingredients for Future AI Worms
Leviathan Security
October 2026 Mobile Platform Security & Fraud Prevention Assessment
Zero Day Initiative
The October 2026 Security Update Review
Google Safety & Security
Developing Gemini 4 Argon responsibly and safely
Github Security Blog
GitHub’s model for secret detection: Finding more secrets with less noise
Meta Security
Meta’s Generative Ads Model (GEM): Scaling the Central Model and Compute Engine for Frontier Ads AI
Silverfort
5 cybersecurity assumptions AI attacks break
Bishop Fox Security
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CISA Alerts & Advisories
Inductive Automation Ignition Software
CISA Alerts & Advisories
Swann Communications SWIFI-SE2KIC
CISA Alerts & Advisories
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Shielder Blog
Power Grid Model Security Audit
Fastly
AI Bot Cosplay
CrankySec
Still Shit!