215 Security Blogs

Last Updated: 25 Aug 26 04:31 UTC

Blog List | Github | OPML

2026-08-25

ISC SANS
ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)


2026-08-24

Dark Reading
Exploited Zimbra Flaw Highlights Shrinking Window to Patch

Dark Reading
Foul Language: WordlistLoader Disguises Malware as Ordinary Text

Ars Technica Security
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed

Cloudflare
The Cloudflare Blog – Brought to you by EmDash

Meta Security
MetaRoCE: A New RDMA Transport Built for AI-Scale Ethernet

Meta Security
MTIA 300: Meta’s First Training Chip with Built-in NICs and Communication-Offloading Engines

Malwarebytes
Fake GTA 6 Extended Look and demo sites deliver an infostealer

Rapid7
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

Jericho
Q&A: Modernizing the National Vulnerability Database in the Age of Artificial Intelligence

Xint
XBOW vs. Xint

Dark Reading
Tricky 'SynkLoader' Multitool May Herald Ransomware

Malwarebytes
Fake Microsoft security scans trick victims into uninstalling their antivirus

Malwarebytes
What happens to your data when you die? (Lock and Code S07E17)

Dark Reading
ToxicPanda Banking Trojan Matures Into Enterprise Threat

Malwarebytes
AliExpress caught using silent audio to fingerprint visitors’ browsers

MIT Technology Review
How to encourage smarter AI use in the classroom

Dark Reading
The Vulnerability Gap: Why Discovery Is Outrunning Repair

Scott Helme
The ultimate road trip combo: Starlink Mini + UniFi Travel Router

Malwarebytes
ToxicPanda 2.0 can take over your Android phone and banking apps

MIT Technology Review
The Download: kids outlearning AI, and space travel agents

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

XBOW
Threat Hunting with AI: Why it Matters and the Role of Autonomous Pentesting Tools

Malwarebytes
Tracking PavinLoader across ClickFix and fake download campaigns

Aikido
How Aikido finds more vulnerabilities than Claude Security at half the cost

Schneier on Security
Criminal Deception in Silicon Valley

Alex Schapiro
How a Blackstone real estate company exposed Social Security digits, dates of birth, addresses, and other applicant data through a GraphQL authorization flaw

MIT Technology Review
Kids outlearn AI—and we still don’t know why

ISC SANS
DOUBLECUP's PNG Payload, (Mon, Aug 24th)

Malwarebytes
A week in security (August 17 – August 23)

Socket
Open VSX Unblocks Extension IDs Used in Malware Campaign

Troy Hunt
Weekly Update 518: IoT Doorlock Nirvana with UniFi

ISC SANS
ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)

Elastic Security Labs
How a team of entity maintainers monitors, connects and scores entities in Elastic Security

Auth0
Adding a UI to an Auth0-secured MCP server with Skybridge

Auth0
Branded Login URLs and Email Workflows for Production Auth

Datadog HQ
Monitor Azure Functions across every hosting plan with Datadog


2026-08-23

Step Security
The State of Open Source Supply Chain Attacks

MaskRay's Blog
Block frequency

Troy Hunt
Welcoming the Sri Lankan Government to Have I Been Pwned


2026-08-22

Step Security
Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper


2026-08-21

Cloudflare
Say it once: introducing Bot Preference Sync

Schneier on Security
Friday Squid Blogging: Neon Flying Squid

Aikido
Top image hardening tools in 2026

Dark Reading
How an Emerging Industrial Protocol Family Could Put OT at Risk

Aikido
Best enterprise AI pentesting tools for application security in 2026

Socket
PHP and Composer Support Is Now in Beta

Dark Reading
OWASP Flags Top AI Skill Risks in New Security Blueprint

Schneier on Security
AI Is Learning to Write Genetic Code

Malwarebytes
Zombie Card: An expired Visa credit card can be used for purchases

Dark Reading
Calling on Cyber Pros to Help Defend City Hall

Aikido
What is CVE remediation in 2026?

Scott Helme
Introducing dbsc.dev: Does Your Browser Support DBSC?

Dark Reading
OpenAI Adds Controls That Should've Been There Already

ToxSec
CoT Forgery: Prompt Injection on the Model’s Own Thoughts

Dark Reading
Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 34

Bishop Fox Security
No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452

core-jmp
BOFScale: A CDN-Fronted Tailnet from a BOF-PE

MIT Technology Review
The Download: threats from space mirrors and credit for AI drugs

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Malwarebytes
Medical records, SSNs, and bank details exposed in CareCloud data breach

Schneier on Security
More Incidents of AIs Going Rogue in Cybersecurity Challenges

Aikido
We burned 11.7bn tokens to find the best cyber AI model

Escape DAST
Escape found the same XSS in two AI chatboxes. The vulnerability was in the Markdown renderer.

MIT Technology Review
Mother tongue

MIT Technology Review
When AI designs a drug, who gets the credit?

MIT Technology Review
This company’s plans to deploy space mirrors could jeopardize the night sky for many

Hunt and Hackett
On COM/WinRT initialization, apartments, and lpacCom capability bypasses, Part 2

Moonlock
Is iCloud Private Relay leaking your IP address? A lawsuit claims it is.

Moonlock
Apple’s anti-tracking prompt will change in the EU. Here’s why.

Moonlock
New Mac malware AmnesiaStealer hijacks Chromium browsers

ISC SANS
Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st)

ISC SANS
ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)

ISC SANS
Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)

Datadog HQ
Control trace volume with OpenTelemetry tail-based sampling


2026-08-20

Socket
Socket Now Protects the Firefox Extension Ecosystem

Dark Reading
New CUSTODY Framework Constrains AI Agents Inside the Network

Dark Reading
What We Missed: Delta Flight Disrupted With Wi-Fi Hack

Amazon Security
AWS Network Firewall now supports rule hit count

Talos Intelligence
Is Cyber missing the Marque?

The Citizen Lab
‘Unprecedented’ Number of Apple Users Received Recent Spyware Alert

Schneier on Security
Detailed Timeline of OpenAI’s Cyberattack on Hugging Face

Dark Reading
N-able Bug Exposes Password Vault Master Keys

Dark Reading
Money and Mindset: The Two Biggest Roadblocks to Cyber Policing

Cloudflare
From all-or-nothing to task-based OAuth consent

Wiz
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

Socket
Popular Rust Crates Compromised in Build-Time Supply Chain Attack

MIT Technology Review
Debates over AI consciousness are a trap

Dark Reading
Pakistan's Transparent Tribe Refreshes Toolset for Afghan Cyberattacks

Malwarebytes
ChatGPT for Teens tackles risky chats and homework shortcuts

Escape DAST
Horizon3.ai alternatives in 2026: Escape vs NodeZero and 4 more tools

GitGuardian
Machine-Speed Credential Abuse: What the ChainDrop npm Worm Changes

Dark Reading
'Grandoreiro' Malware Resurfaces With Mexico Campaign

Malwarebytes
Twitch wants your content for Amazon AI training. Here’s how to opt out

ISC SANS
Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th)

Ars Technica Security
Grok exfiltrates user data when malicious instructions are encrypted

Bishop Fox Security
CTEM 101: Moving From Spreadsheets to Continuous Risk Reduction

ISC SANS
Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses, (Thu, Aug 20th)

Malwarebytes
Your Mac already has a built-in firewall. Here’s how to get more from it 

MIT Technology Review
The Download: polycrisis support networks and a hydrogen gold rush

CISA News
CISA Releases Foundational, Flexible Guidance to Help Federal Agencies Implement Effective Logging, Visibility and Operational Standards

CISA Alerts & Advisories
Johnson Controls Simplex Incident Manager

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

XBOW
Vulnerability Management Automation: How to Prioritize and Remediate at Scale

Malwarebytes
9 million images of people’s faces exposed by reverse lookup service

Aikido
Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack

Escape DAST
Introducing Escape's Channel Partners

Talos Intelligence
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities

Talos Intelligence
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations

MIT Technology Review
The next big thing in hydrogen could be underground

Schneier on Security
Police Are Hiding Their Use of Flock Surveillance Cameras

ISC SANS
ISC Stormcast For Thursday, August 20th, 2026 https://isc.sans.edu/podcastdetail/10060, (Thu, Aug 20th)

Aikido
AI pentesting evaluation checklist: What to look for in an AI pentesting vendor

Auth0
Enterprise Readiness Is Not What You Support. It Is What Your Customers Can Own

Datadog HQ
Detect vulnerabilities in LLM applications with Datadog’s AI-native SAST

Auth0
Enterprise-Managed Authorization for your MCP server: Setting Up and Testing XAA in Auth0

Datadog HQ
From signals to systemic risk: Building Risk AI


2026-08-19

Dark Reading
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns

Dark Reading
Agentic AI Presents New Insider Threat Model for Orgs

Malwarebytes
41 deceptive download sites show a real link, then send you somewhere else

Socket
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft

Microsoft Security
Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Amazon Security
Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

Dark Reading
SilkParasite Threatens Central Asian Orgs With Flurry of RATs

Rapid7
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Cloudflare
A revisit of remote Spectre attacks on Cloudflare Workers

Wiz
Wiz Penetration Test Findings is now GA

Malwarebytes
Sideloading on Android: What it is, why it’s risky, and how to do it more safely

ISC SANS
Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)

Escape DAST
Escape vs Pentera: how each one proves exploitability (2026)

Eclypsium
CVE-2026-20349: Someone Is Crashing Cisco Firewalls. We Need to Talk About Why.

Aikido
Yet another RCE in Gogs, but it's fixed this time!

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts & Advisories
Defending Against an Active Threat to Siemens S7 Series PLCs

Rapid7
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America

Malwarebytes
Scammers are using fake crypto AML checkers to drain your wallet

Schneier on Security
ICE Collecting DNA Samples

Malwarebytes
Update Chrome now: Two critical vulnerabilities fixed

Escape DAST
Pentera Alternatives for Continuous Pentesting: 7 Competitors Compared In-Depth

Talos Intelligence
Describing attacks with crime script analysis

Malwarebytes
Your polite reply to that text is worth $2 on the dark web 

Binarly
7 Vulnerability Management Best Practices That Reduce Real Risk

Dark Reading
China-Linked Hacker Shows AI Capabilities in APAC Attack

Datadog HQ
How CISA’s BOD 26-04 changes vulnerability prioritization

Teleport Blog
We Had 13 Engineers Spend Three Months Finding Vulnerabilities with LLMs

zerotistic
Reverse-engineering Find My People to stalk my ex a friend, cause I can

Fastly
MCP at the Edge: What Changes When MCP Runs Securely in Every POP

Snyk
Remediation Agents, Demystified: Why Fixing Beats Finding

Datadog HQ
20× the CI traffic without getting slower: How we rebuilt Git serving at Datadog

Rosecurify
Seclog - #191

Auth0
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Sending Email with Token Vault


2026-08-18

Dark Reading
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

Amazon Security
Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway

Dark Reading
'CoSnitch' Attack Tricked Copilot Into Mapping Out Architecture

Dark Reading
The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed

Dark Reading
CISOs Break Their Silence in 'Declassified' Docuseries

Microsoft Security
Hunting MacSync Stealer infrastructure through behavioral pivots

Amazon Security
Security Hub Extended adds Supply Chain Security as its tenth category

Wiz
How to Spot and Stop Rogue Device Joins

GitGuardian
Why Secrets Slip Through Every Layer of Your Security Stack

Cloudflare
BGP Role model: tracking the adoption of RFC 9234

Malwarebytes
Apple fixes another image-processing flaw that could allow code execution

Xint
Xint’s Auto-Remediation Approach: Why Human-in-the-Loop Remains Essential

core-jmp
Physical Memory Is a Universal Kernel Primitive: The eneio64.sys LPE Chain on Windows 11 24H2

ToxSec
Stealing an AI's Thoughts Without Breaking The Encryption

core-jmp
Modern Implant Design: Building Position-Independent Malware with Global State

Ars Technica Security
Microsoft Copilot reveals secret input that allowed it to be hacked

Dark Reading
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service

Dark Reading
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud

Rapid7
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

CISA Alerts & Advisories
CISA Malcolm

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

Wiz
Announcing the 2026 Wiz Partner Alliance Award Winners

CISA Alerts & Advisories
Siemens Simcenter Nastran

Malwarebytes
Be careful what you put in “anyone with the link” Google Docs

Schneier on Security
LLMs and Contextual Integrity

Resecurity
Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding