219 Security Blogs

Last Updated: 29 Sep 26 18:10 UTC

Blog List | Github | OPML

2026-09-29

Dark Reading
Cloudflare Announces Public Certificate Authority for the Post-Quantum Web

Microsoft Security
​​Beyond source code: A path to the keys to the kingdom

Socket
upm Launches as a Fast, Tiny Package Manager Written in TypeScript

Dark Reading
'NeedyMantis' Provides Long-Term Access to Compromised Networks

GitGuardian
Generative AI Security: Are Your Developers Pasting Secrets Into LLMs?

Microsoft Security
Star Blizzard refines phishing and malware delivery with the RedFlick technique

ReversingLabs
Can advanced math make AI systems safer?

Dark Reading
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

watchTowr Labs
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

ToxSec
AI-Powered Phishing: Why Traditional Email Security Is No Longer Enough [Guest Post]

ISC SANS
Scans for Wordfence Protected Websites, (Tue, Sep 29th)

Cloudflare
Preventing quantum downgrade attacks against IPsec

Cloudflare
Using AI to chart a course for our post-quantum migration

Cloudflare
Building a certificate authority for the whole Internet

Cloudflare
Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks

Cloudflare
Building a post-quantum certificate authority with Merkle Tree Certificates

Cloudflare
We tested our own WAF with frontier AI models. Here’s what we found

Cloudflare
Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account

Cloudflare
Is your domain using post-quantum encryption? Now you can see for yourself

Cloudflare
Enforce positive security with Cloudflare Application Profiles

Malwarebytes
Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home

Wiz
The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub

MIT Technology Review
The Download: climate tech companies to watch and AI’s discovery problem

CISA Alerts & Advisories
Baicells Nova 430H

CISA Alerts & Advisories
Lantronix G520 Series Cellular Gateway

CISA Alerts & Advisories
Toptech TMS7 and TopHAT

CISA Alerts & Advisories
Viidure Dashcam Android Application

CISA Alerts & Advisories
Anjvision YSSD-RTMP-H5

CISA Alerts & Advisories
VIVOTEK Camera Firmware

CISA Alerts & Advisories
MikroTik RouterOS

Schneier on Security
Using Device Linking to Eavesdrop on WhatsApp and Signal

MIT Technology Review
Coming soon: Our 2026 list of Climate Tech Companies to Watch

MIT Technology Review
Making AI an asset, not an expense

Malwarebytes
Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

Talos Intelligence
Securing the keys to the kingdom: Announcing Executive Threat Detection

Malwarebytes
Fake iPhone Duo preorder scam triggers DarkSword attack

Malwarebytes
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests

Shielder Blog
louis-rs Security Audit

Palo Alto Networks
Why OT Resilience Is Now a Boardroom Imperative

Voidstar Security Research Blog
A Hacker's Guide to ARM Tracing - ETM, ITM, and the TPIU

ISC SANS
ISC Stormcast For Tuesday, September 29th, 2026 https://isc.sans.edu/podcastdetail/10114, (Tue, Sep 29th)

Rosecurify
Seclog - #197

Semgrep
Claude Opus 5.5 Writes Working Code but Only Half of It Is Secure

Elastic Security Labs
No MDM for Linux? A 68-line Elastic workflow keeps every endpoint's config current

Auth0
Introducing IdentiFlows.dev: A Visual Reference for Identity Flows

Auth0
Integrating Claude Code with Auth0 APIs


2026-09-28

ISC SANS
Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)

MIT Technology Review
Roundtables: The Deadly Failures of The Virtual Border Wall

Dark Reading
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities

Dark Reading
One Packet Can Crash OT Servers in Industrial Sectors

Dark Reading
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

Github Security Blog
How we found 24 Android vulnerabilities using our open source AI security agent

Dark Reading
AI Agents Are Privileged Users; Who Is Auditing Their Access?

Amazon Security
AWS European Sovereign Cloud: Demonstrating an independent operation

MIT Technology Review
When can we say AI made a scientific discovery?

Offensive Security
CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API

Dark Reading
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions

Eclypsium
Safe AI Agents Start With Trusted AI Infrastructure

Cloudflare
Introducing cf: the agentic CLI for the entire Cloudflare API

Aikido
Aikido funds Node.js security

Dark Reading
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack

Krebs on Security
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

Microsoft Security
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Cloudflare
Next.js applications, powered by Vite: introducing Vinext 1.0

Cloudflare
How fast is the web? Explore billions of real-user measurements with BEACON

Cloudflare
Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more

Cloudflare
The road to the agentic browser: A Kitesurf update

Cloudflare
Introducing The Cold Start: pitch your startup live at Cloudflare Connect

Cloudflare
EmDash 1.0: the stable CMS with a secure plugin registry

Cloudflare
Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen

Cloudflare
Four months of VoidZero at Cloudflare: making the open-source JavaScript toolchain faster for all humans and agents

Malwarebytes
OpenAI pauses work on top AI models after agent slips past internet controls

Wiz
Introducing the Wiz Partner Alliance Managed Service Provider Program

MIT Technology Review
The Download: rogue agent liability and the AI Hype Index

Schneier on Security
New Attack Against RSA

Moonlock
9 tricks behind every Bumble scam that can start with a single photo

watchTowr Labs
Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

Rapid7
Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Malwarebytes
FBI agents’ blood tests and doctors’ notes surface after breach

Palo Alto Networks
Securing AI Agents at Scale with NVIDIA

MIT Technology Review
Who’s liable when AI agents go rogue?

Troy Hunt
Weekly Update 523: Live From a Norwegian Fjord

Malwarebytes
A week in security (September 21 – September 27)

Moonlock
How to hide orders on Amazon and clear your browsing history

ISC SANS
ISC Stormcast For Monday, September 28th, 2026 https://isc.sans.edu/podcastdetail/10112, (Mon, Sep 28th)

Moonlock
Is your Messenger hacked? Here’s how to tell and what to do

Greynoise
Swarming Against Citrix 0-Day Exploitation

Auth0
Auth0 for ChatGPT - Build and Manage Identity by Just Asking

Auth0
Securing Agentic Commerce Using Auth0 and the Universal Commerce Protocol (UCP)

Elastic Security Labs
Quarantined isn't contained: Agentic phishing response with Elastic and Sublime

Fastly
Fastly's 2025 Sustainability Report: Running the Decarbonization Marathon


2026-09-27

Cloudflare
Cloudflare’s 2026 Annual Founders’ Letter

ISC SANS
Wireshark 4.6.9 Released, (Sun, Sep 27th)

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Zero Salarium
EDR Evasion: Process Injection Without WriteProcessMemory

Paultendo
Lookalike letters don’t fool GPT-6 or Claude, but nearly quadruple the bill


2026-09-26

DarkRelay
HTTP and HTTPS Enumeration for Pentesting (80, 443)

shubs
do we still enjoy software engineering in the age of AI?


2026-09-25

Krebs on Security
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

Schneier on Security
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee

Socket
Socket Joins New OpenJS Program to Fund Node.js Security Work

Dark Reading
Why the CISO-CFO Relationship Is a Key to Cybersecurity Success

Ars Technica Security
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?

Dark Reading
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

Varonis
AI Security Fundamentals: The Real Industry Shift Taking Place

Dark Reading
What We Missed: Google Gemini Joins the AI Escape Party

Microsoft Security
Storm-3168: Agentic-driven cloud attacks using compromised service principals

Malwarebytes
LinkedIn adds new checks for fake profiles and work histories

Eye Security Research
Rise of the Jev-Clones

GitGuardian
AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP

Malwarebytes
Kothamine malware uses Tailscale’s tailcat to evade network detection 

Wiz
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments

Dark Reading
Stopping IT Worker Scams Requires Revamped HR Process

Rapid7
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

Silverfort
Silverfort integrates with Anthropic to turn Claude activity into identity context

Bishop Fox Security
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326

Cloudflare
Agents can now set up your website’s security with Turnstile Spin

ISC SANS
A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)

Malwarebytes
Criminals turn placeholder domain into ClickFix trap

MIT Technology Review
The Download: the Pentagon’s AI-powered lie detector and young organ limits

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Schneier on Security
On Anthropic’s AI Misuse Report

Trail of Bits
Don't let TEEs break your MPC

Malwarebytes
That shipping rebate offer may come with a monthly charge

MIT Technology Review
The Pentagon wants $30 million to build an AI-powered lie detector

MIT Technology Review
Young organs may not be a fountain of youth for recipients

Dark Reading
Russia's Hybrid Cyber-Physical War in Europe Heats Up

ISC SANS
ISC Stormcast For Friday, September 25th, 2026 https://isc.sans.edu/podcastdetail/10110, (Fri, Sep 25th)

Moonlock
Fake Zoom and Slack downloads are spreading the new Sonoma stealer

Moonlock
Is CCSPayment a scam or legit? What CCS Offices notices really mean

Datadog HQ
Extend Datadog RUM and Product Analytics to Shopify and Salesforce

Semgrep
What Application Security Actually Does All Day

Auth0
Stop Building MFA from Scratch (And What to Do Instead)

Teleport Blog
How to Eliminate Shared Production Kubeconfigs


2026-09-24

Socket
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud

Dark Reading
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

Dark Reading
SectopRAT Returns, Hiding Inside a Legitimate Application

Aikido
Top CodeQL alternatives in 2026

Github Security Blog
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

Red Siege InfoSec Blog
Red Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect

Talos Intelligence
Trust and the enticing consultancy offer

Wiz
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026

Microsoft Security
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Microsoft Security
​​​​​​​​What’s new in Microsoft Security: September 2026​​

Silverfort
Replicating part of the OpenAI attack on Hugging Face

GitGuardian
How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding

Dark Reading
3 Cyber Threats That Defined the Summer of 2026

Dark Reading
How to Build a SASE Framework for Modern Cybersecurity

Dark Reading
Ghost Service Accounts Enable M365 Data Theft in Chile

Malwarebytes
OpenAI agent breached Australian government site, took months to report it

Wiz
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure

Dark Reading
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

Rapid7
When Business Email Compromise Starts Rewriting Reality

Bishop Fox Security
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications

Malwarebytes
New Browser Guard features add protection before and after you click

XBOW
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale

CISA Alerts & Advisories
Botslab G980H Dashcams

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Siemens Mendix Runtime (Update A)

CISA Alerts & Advisories
Eufy Omni C20, Omni X10 Pro

Ars Technica Security
There's a new way to break RSA that's faster than anything we've seen before

Schneier on Security
Malicious npm Packages That Evade Defenses

Malwarebytes
Update Chrome: 108 security fixes for desktop, new release for Android

Ali Yazdani
The Security Engineer's Survival Kit for the AI Era

Malwarebytes
Google’s location data privacy failures draw a €403 million fine

ISC SANS
One URL, Three Different Tricks, (Thu, Sep 24th)

TrustedSec
What's New in hate_crack Since 2.0

Snyk
Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface

ISC SANS
ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th)

Moonlock
Guests, hosts, and the Airbnb scams that target both

Project Black
Bypassing EDR with Local AI

Project Black
Bypassing EDR with Local AI

Star Labs
How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail

Datadog HQ
Using TypeSafe’s Jev for evals in Datadog Agent Observability

Semgrep
Introducing Malware Detection and Response Automation

Meta Security
Bringing Private Processing to Meta AI Glasses

Accomplish
Escaping the Cloudflare sandbox

Infernux Blog
Major data lake changes in Microsoft Sentinel September 2026 Update

Star Labs
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE

Paultendo
tothepenny: bank statements that have to add up

Paultendo
Testing RaySpace against the letters we already know


2026-09-23

watchTowr Labs
Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

Amazon Security
ICYMI: August 2026 @AWS Security

Dark Reading
SASE Converges Network & Security Into One Cloud Solution

Doyensec
One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts

Ars Technica Security
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real

Socket
Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts

Dark Reading
EDR Evasion Stack Helps Process Injection Slip Past Defenses

Dark Reading
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

XPN's Blog
Experimenting with Jev for Offensive Security

Zero Day Initiative
CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer

Malwarebytes
How device code phishing gives scammers access to your account

ISC SANS
Macfinger ClickFix campaign, (Tue, Sep 22nd)

Praetorian
Hannibal Puts Autonomous Penetration Testing Under Your Control

Aikido
Top Greptile alternatives in 2026

Dark Reading
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks

Microsoft Security
Reimagining the SOC for the agentic era in Microsoft Defender

ReversingLabs
AI changes cyber spending — but where’s the line-item for tokens?

Dark Reading
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign

Amazon Security
Supporting ASD’s multi-factor authentication campaign: Why MFA matters more than ever

Step Security
Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes

PortSwigger
HTTP/3 in Burp Suite - it’s time to find a bigger wordlist

Rapid7
How dynamic application security testing validates risk at runtime

Varonis
Meet AvisLoader: A Windows Loader Built to Outlast a Takedown

Aikido
Aikido and Deel: set up once, secure every hire

Malwarebytes
Fake Claude Max giveaway hides a Google account phishing trap

Eye Security Research
AI vulnerability discovery using the Kitten process: How we found CVE-2026-75754

Malwarebytes
ShinyHunters claims FBI breach was revenge for “false” report

CISA News
CISA Whitepaper Charts Path to Establishing and Maturing CVE Program Quality

CISA Alerts & Advisories
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators

Schneier on Security
Research on Models Engaging in Genie-Like Behavior

Socket
MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack

Rapid7
CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

Aikido
Novel supplychain.local Go worm appears

Voidstar Security Research Blog
Extending Scapy for Hardware Reverse Engineering

Aikido
Send GitLab an email, push to main

DarkRelay
Windows Driver Fuzzing with WinAFL: Theory to Practice

Troy Hunt
Weekly Update 522: Live From Oslo with Scott Helme

Elttam
ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE - elttam

Arch Cloud Labs
Testing BTRFS w/ Release Candidate Kernels on Arch Linux

Aikido
Cyber Resilience Act is here! Myth busting and first impressions

Mehmet Ince
Part 2/6 | Breaking the Postgres Superuser Guardrails: Attacking Security-Hardening Extensions |Systemic Risks in the Managed PostgreSQL Industry

Datadog HQ
Configure RUM SDKs remotely from Datadog

Datadog HQ
Find answers in your logs faster with Datadog’s Tap to Parse

Datadog HQ
Teaching a 9B model to investigate production alerts

Infernux Blog
What is the Integrated Security Operations Center (ISOC) for Defender XDR?

Semgrep
The AI Ecosystem Has Worms Now: Inside the MemTensor Compromise

Fastly
Knowledge Is Power: Control AI Bot Scraping with Fastly Bot Management


2026-09-22

Dark Reading
Relays Are Masking Chinese Access to Frontier AI Models in the US

Dark Reading
How the CISO-CMO Alliance Builds Trust Before Crisis Strikes

Dark Reading
Microsoft Disrupts EvilTokens Device Code Phishing Service

Dark Reading
Deception by Design: CISA's Guide to Tricking Cybercriminals

Ars Technica Security
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts