2026-10-30
2026-10-29
Mozilla Security
Defending the patch gap against automated attackers
Dark Reading
Rethinking Cybersecurity Awareness in the AI Era
Talos Intelligence
A quiet week in infosec <.<
Eclypsium
Building Trusted AI Infrastructure
Include Security
Abliterated Models in Appsec Pentesting
Microsoft Security
Tracking AI adoption in North Korean threat actor tradecraft
Microsoft Security
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
Talos Intelligence
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
Bishop Fox Security
A Journey into Claude's Sandbox
Ars Technica Security
Massive leak exposes 41,000 DHS workers and undercover ICE agents
Eclypsium
Building Trusted AI Infrastructure
MIT Technology Review
The Download: AI agent tracking and climate feedback loops
CISA Alerts & Advisories
Siemens Mendix SAML Module
CISA Alerts & Advisories
Hitachi Energy TRO600 series products
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Hitachi Energy CoreTec Product
MIT Technology Review
We urgently need to monitor AI agents’ actions in real time
MIT Technology Review
Our climate models have a big, dangerous blind spot
Talos Intelligence
NIK C2: The new AI-enabled command-and-control framework
Eye Security Research
How attackers keep reading mail after M365 session revocation
2026-10-28
Talos Intelligence
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
MIT Technology Review
Creating AI value with enterprise context
Black Hills Info Sec
John Strand's 11 Core Skills: For SOC Analysts
Silverfort
Weaponize your identity debt: Identity Security, decoys, and tripwires in the age of AI attacks
Meta Security
Meta Andromeda: Powering the Next Generation of Ads Retrieval Through Model-System Co-Design
Microsoft Security
The CISO’s evolving role: Protecting and defending in the agentic era
GitGuardian
Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First
Hybrid Analysis Blog
SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks
Malwarebytes
Banks are blocking AI agents from customer accounts
MIT Technology Review
The Download: dead startups fueling AI and interspecies communication
MIT Technology Review
Pairing industrial AI autonomy and human control
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Schneier on Security
Studying Fraudulent North Korean IT Workers
2026-10-27
Ars Technica Security
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Amazon Security
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
Socket
Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets
Amazon Security
Part 3 – Cybersecurity journeys: The work behind the work
The Citizen Lab
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
Zero Day Initiative
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
Meta Security
PrivacyLib: Privacy Controls at the Data Access Boundary
ReversingLabs
Researchers Break Into Anthropic’s Systems in Just 12 Hours—Through Third-Party Software
Malwarebytes
Five election scams to watch out for
Step Security
StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines
PortSwigger
Scalable Vector Grief
Cloudflare
What took the Internet offline in Q3 2026
Bishop Fox Security
Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
Malwarebytes
Artificial Intimacy: Love and lies in the age of AI
MIT Technology Review
The Download: Anthropic’s IPO, smarter power grids, and exercise pills
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
CISA Alerts & Advisories
EPICS Base
MIT Technology Review
Industrial Intelligence: The next growth opportunity for manufacturing
Escape DAST
Escape research found an auth bypass in Ghost that can wipe all member's votes. It's now CVE-2026-103288.
Schneier on Security
Hiding Capabilities in AI Models
Talos Intelligence
From federal SOCs to Talos: Ryan Fetterman on practical security research
MIT Technology Review
How solid-state transformers could help power the AI boom
TrustedSec
What is CUI? A Contractor’s Perspective
2026-10-26
Doyensec
ElectroNG is now open source!
Cloudflare
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
MIT Technology Review
Will the real Anthropic please stand up
Meta Security
Meta Networking at the 2026 OCP Global Summit: Open Innovation for Scale-Up, Scale-Out, and Scale-Across AI Networks
Palo Alto Networks
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management
Step Security
litellm 1.107.0 Compromised on PyPI and Docker: Credential Stealer and Hourly Remote Code Loader
Malwarebytes
AI Halloween videos: Who’s getting your photos?
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA News
CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security
Schneier on Security
Bias in Qwen3-Coder Model
Malwarebytes
A week in security (October 19 – October 25)
Sansec Threat Research
Notorious Brazilian Magecart group hijacks Convertr checkouts via outdated Plausible install
Rosecurify
Seclog - #201
Elastic Security Labs
Kernel eviction notice: What wesp.sys reveals about the Windows Endpoint Security Platform
2026-10-25
2026-10-24
Step Security
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
Sansec Threat Research
deepveindrilling.com: Magento CMS block loader hits 953 stores
2026-10-23
Schneier on Security
Friday Squid Blogging: Increasing Squid Populations
Microsoft Security
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
Ars Technica Security
Knicks sent employees fake offer of championship rings in phishing test: Report
Palo Alto Networks
Palo Alto Networks Brings Continuous AI Defense and Prisma AIRS to the OpenAI Marketplace
The Citizen Lab
Built-In Weakness: Lawful Access and Encryption in the Age of AI-Powered Cyber Threats
NVISO Labs
PHP2Shell Operational Guidance
Dark Reading
Why Caribbean Threats Cascade Into Global Cyber-Risk
Varonis
Go With the Flow: How a Shadow Dependency Led to a Cross-Tenant Vulnerability in GCP Dataflow
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Schneier on Security
Compromised TLS Certificates