219 Security Blogs

Last Updated: 29 Oct 26 08:30 UTC

Blog List | Github | OPML

2026-10-29

Aikido
Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster

Dark Reading
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause

DarkRelay
How Weak WiFi Passwords Get Cracked (WPA2 Lab Demo)

ISC SANS
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)

ISC SANS
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)

Socket
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users

ISC SANS
Yet Another ClickFix Campaign, (Wed, Oct 28th)


2026-10-28

Talos Intelligence
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

Mend
PHP2Shell is in CISA KEV: why runtime visibility matters

MIT Technology Review
Creating AI value with enterprise context

Black Hills Info Sec
John Strand's 11 Core Skills: For SOC Analysts

Dark Reading
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub

Silverfort
Weaponize your identity debt: Identity Security, decoys, and tripwires in the age of AI attacks

Meta Security
Meta Andromeda: Powering the Next Generation of Ads Retrieval Through Model-System Co-Design

GitGuardian
Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First

Microsoft Security
The CISO’s evolving role: Protecting and defending in the agentic era

Dark Reading
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

The Citizen Lab
Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk

Hybrid Analysis Blog
SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks

Malwarebytes
Banks are blocking AI agents from customer accounts

Step Security
GitHub Actions Native Egress Firewall vs. Harden-Runner: Five Differences That Matter

Rapid7
How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance

MIT Technology Review
The Download: dead startups fueling AI and interspecies communication

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

MIT Technology Review
Pairing industrial AI autonomy and human control

Malwarebytes
Chrome and Firefox updates fix serious security flaws. Install them now

Schneier on Security
Studying Fraudulent North Korean IT Workers

Aikido
Aikido launches external network pentesting

HN Security
Putting Claude Code in a box: a sandboxed dev container for Zed

Dark Reading
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature

Snyk
PHP2Shell Won't Be the Last. Here's Where the Next One Will Show Up First.

ISC SANS
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)

Datadog HQ
Match monitoring depth to workload needs with Infrastructure Basic

Snyk
Snyk UNFILTERED: Inside Our First-Ever Customer Summit


2026-10-27

Amazon Security
Introducing Route 53 Resolved IP Validation for AWS Network Firewall

Eclypsium
Ars Technica: Code-execution flaw in UEFI firmware affects most servers on planet Earth

Dark Reading
3 Frameworks to Protect CISOs & Orgs Against AI Liability

Dark Reading
External Teams Chats Anchor 15-Minute Malware Delivery

Ars Technica Security
Code-execution flaw in UEFI firmware affects most servers on planet Earth

Dark Reading
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack

Praetorian
php2shell in Practice: Exploitable, Conditional, and Hard to Mass-Exploit

Amazon Security
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope

Dark Reading
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills

Socket
Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets

GitGuardian
GhostAction Crosses Paths With PolinRider: Inside the October Escalation

Amazon Security
Part 3 – Cybersecurity journeys: The work behind the work

The Citizen Lab
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’

Dark Reading
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants

Zero Day Initiative
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

Meta Security
PrivacyLib: Privacy Controls at the Data Access Boundary

ReversingLabs
Researchers Break Into Anthropic’s Systems in Just 12 Hours—Through Third-Party Software

Meta Security
Python Typing Survey 2026: AI Tools and the Shifting Checker Landscape

Sicuranext Blog
Two RCEs, one Wednesday: responsible disclosure has run out of time

Sicuranext Blog
Two RCEs, one Wednesday: responsible disclosure has run out of time

XBOW
PHP2shell: Patch Today, Then Prove It

Malwarebytes
Five election scams to watch out for

Step Security
StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines

PortSwigger
Scalable Vector Grief

JFrog
The Impact of AI on CVEs: Industry Challenges

Wiz
PHP2Shell: Exploitation Attempts and Remediation Trends

Cloudflare
What took the Internet offline in Q3 2026

Bishop Fox Security
Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

Cloudflare
Introducing the Cloudflare PHP Capture the Flag challenge

Malwarebytes
Artificial Intimacy: Love and lies in the age of AI 

Rapid7
Simplify User Access Management with SCIM on Rapid7 Command Platform

Malwarebytes
The web’s having a rough week. Here’s how to browse safely

MIT Technology Review
The Download: Anthropic’s IPO, smarter power grids, and exercise pills

CISA Blog
CISA Publishes Significant Updates to ScubaGear and ScubaGoggles

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
EPICS Base

CISA Alerts & Advisories
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

ToxSec
AI Didn’t Break Security. It Just Stopped Forgiving Bad Fundamentals.

MIT Technology Review
Industrial Intelligence: The next growth opportunity for manufacturing

Escape DAST
Escape research found an auth bypass in Ghost that can wipe all member's votes. It's now CVE-2026-103288.

Schneier on Security
Hiding Capabilities in AI Models

Malwarebytes
Samsung TVs without mics may listen through soundbars, researcher says

Talos Intelligence
From federal SOCs to Talos: Ryan Fetterman on practical security research

MIT Technology Review
How solid-state transformers could help power the AI boom

Troy Hunt
Weekly Update 527: Cybergeddon News v. Reality

TrustedSec
What is CUI? A Contractor’s Perspective

ISC SANS
ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)

ISC SANS
Apple Patches for October 2026, (Mon, Oct 26th)

Dark Reading
So Many AI Security Benchmarks, But None Tell the Whole Story

Semgrep
You Can Be Aware and Still Get Compromised. Readiness Limits the Damage.

Semgrep
Broccoli2Shell: The One Decoder to Rule Them All


2026-10-26

Doyensec
ElectroNG is now open source!

Aikido
How to patch PHP2Shell with free Aikido Images

Socket
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected

Cloudflare
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

Dark Reading
Risks & Rewards: How AI Is Redefining the CISO's Role

Socket
eMudhra, Brotli, and the Long Tail of a Security Fix

Dark Reading
In-the-Wild Attack Abuses AI Agents' Trust in Markdown

Dark Reading
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

MIT Technology Review
Will the real Anthropic please stand up

Rapid7
CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

Meta Security
Meta Networking at the 2026 OCP Global Summit: Open Innovation for Scale-Up, Scale-Out, and Scale-Across AI Networks

GitGuardian
OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

Palo Alto Networks
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management

Step Security
litellm 1.107.0 Compromised on PyPI and Docker: Credential Stealer and Hourly Remote Code Loader

Dark Reading
10 Software Security Practices Built for the Next 250 Years

Malwarebytes
Popcorn Time’s forgotten updater left millions of devices exposed to hijacking

Wiz
The Pwn Request Reckoning: What Still Works Against GitHub Actions

Malwarebytes
AI Halloween videos: Who’s getting your photos?

MIT Technology Review
The Download: everyday AI harms and the race to nuclear spaceflight

Escape DAST
Introducing Cascade Iguazu: multi-agent AI pentesting you can audit

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA News
CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security

Malwarebytes
Patient records exposed in Quest breach: What you need to know

Schneier on Security
Bias in Qwen3-Coder Model

ISC SANS
Looking for a Language [Guest Diary], (Wed, Oct 21st)

MIT Technology Review
The focus on AI safety disasters ignores everyday harms

Xint
Stealing OpenAI Reasoning Traces via Compaction Smuggling

Malwarebytes
A week in security (October 19 – October 25)

DarkRelay
Web App Pentesting: Scope, Methodology, and OWASP Standards

Snyk
PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): [Updated for CVE-2026-115560]

ISC SANS
ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)

Datadog HQ
Monitor Oracle AI Database across clouds with Datadog

Hacktron
php2shell: The exploitability gap between frontier and open models

Hacktron
Node2Shell: Brotli Decoder RCE in Node.js (CVE-2026-111497)

Elastic Security Labs
Kernel eviction notice: What wesp.sys reveals about the Windows Endpoint Security Platform

Datadog HQ
Best practices for scaling A/B testing with experiment protocols

Rosecurify
Seclog - #201

Sansec Threat Research
Notorious Brazilian Magecart group hijacks Convertr checkouts via outdated Plausible install


2026-10-25

ISC SANS
YARA-X 1.22.0 Release, (Sun, Oct 25th)

Wiz
Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles

Wiz
Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability


2026-10-24

Aikido
Adding Aikido AI pentesting to your existing security stack

Step Security
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found

Sansec Threat Research
deepveindrilling.com: Magento CMS block loader hits 953 stores


2026-10-23

Socket
New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack

Schneier on Security
Friday Squid Blogging: Increasing Squid Populations

Dark Reading
Trust Is Not What It Seems — and Fraudsters Are Counting on It

Aikido
Node2Shell evolves to HTTP2Shell. Brotli flaw (CVE-2026-111497) blast radius affects many libraries & apps using HTTP.

ISC SANS
(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

Dark Reading
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

Cloudflare
Origin Range Requests: Serving large files without range-request tuning

Microsoft Security
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Cloudflare
Bringing post-quantum cryptography to geographically fenced key management

Dark Reading
AI Tools Are Generating Massive Attacks for Little Cost

Ars Technica Security
Knicks sent employees fake offer of championship rings in phishing test: Report

Palo Alto Networks
Palo Alto Networks Brings Continuous AI Defense and Prisma AIRS to the OpenAI Marketplace

The Citizen Lab
Built-In Weakness: Lawful Access and Encryption in the Age of AI-Powered Cyber Threats

Rapid7
Metasploit Wrap Up: Langflow, MongoDB, and More

NVISO Labs
PHP2Shell Operational Guidance

Socket
Cloudflare Introduces a Faster TypeScript Compiler Written in Rust

Dark Reading
Why Caribbean Threats Cascade Into Global Cyber-Risk

Dark Reading
Cyber Insurance's New Reality: Underwriting Isn't Enough

Malwarebytes
Resident Evil maker Capcom warns of phishing after 11.7 million records exposed

MIT Technology Review
The Download: testing six tech promises and biotech’s blind spots

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Dark Reading
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack

Schneier on Security
Compromised TLS Certificates

Moonlock
How to spot a Dropbox phishing email when everything looks real

Malwarebytes
Crime Stoppers chapter freezes tips after breach breaks anonymity promise

Escape DAST
Jev and the Future of AI Pentesting: Why the Harness Matters More Than Ever

DarkRelay
OWASP Top 10 Penetration Testing

Dark Reading
State Bank of India Suffers a Customer PII Data Leak

Moonlock
Why Trust Wallet scams keep working: Tactics, red flags, and defenses

Moonlock
ICMacOS evolves from a Mac stealer into a remote-access trojan

Elastic Security Labs
How CVE-2026-73570 turns a Zimbra log file into remote code execution

Okta Security
Node2Shell: Node.js Brotli flaw (CVE-2026-111497)

Auth0
Auth0-Powered SaaS Providers Unlock Growth with the Okta Integration Network

Okta Security
Okta and Auth0 are removing trust in the eMudhra emSign ECC Root CA – G3


2026-10-22

Wiz
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context

Dark Reading
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

Dark Reading
What We Missed: Feds Lasso Texas Laptop Farms

Ars Technica Security
Disgraced eMudhra drops out of TLS business after using cert private key of 4

Black Hills Info Sec
Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys

Step Security
eMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update

Dark Reading
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour

Eclypsium
Memory Safety, AI security, Auth Challenges - BTS #84

Aikido
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)

Talos Intelligence
I had plans for that second

Github Security Blog
How bug bounty sharpens one researcher’s security skills

Malwarebytes
Facebook’s misleading privacy claims land Meta a $25 billion penalty

The Citizen Lab
How Generative AI is Scaling Transnational Repression

XBOW
Don't Make It Easy for Attackers: 5 Common AppSec Gaps

Ars Technica Security
Hackers got a four-day head start on epic PHP2Shell vulnerability

Dark Reading
As AI Risks Grow, Insurers Split on Covering the Damage

Malwarebytes
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself

GitGuardian
Responding to php2shell PHP Vulnerability When You Don’t Know What Secrets Are Deployed

Onyphe
Hunting Cobalt Strike in Microsoft and Google clothing, with ONYPHE and Claude Code

Schneier on Security
New Serious PHP Vulnerabilities Released and Patched

Wiz
ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors

Cloudflare
Localizing compliance at scale: achieving South Korea’s ISMS certification

Bishop Fox Security
The True Blast Radius of an AI Attack

Eye Security Research
PHP2Shell: Our assessment of the risk for systems running PHP

Onyphe
Refrigeration as Critical Infrastructure: Beyond Danfoss, the Exposure of Copeland/Dixell Supervisory Systems

CISA Alerts & Advisories
Siemens Capital Embedded AR Classic

CISA Alerts & Advisories
Siemens PSS(R)SINCAL

CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW Station Access Controller

CISA Alerts & Advisories
Siemens SIMATIC S7 PLCs Web Server

CISA Alerts & Advisories
Siemens SENTRON 3NA COM Fuse

CISA Alerts & Advisories
Kiloview E3 NDI Encoder

CISA Alerts & Advisories
Siemens SIMATIC S7-1500 TM MFP

CISA Alerts & Advisories
Siemens Industrial Edge Devices

CISA Alerts & Advisories
Siemens SIMATIC IPCs

CISA Alerts & Advisories
Managing AI Token Consumption for Operational Resilience

CISA Alerts & Advisories
Siemens SIMATIC S7 Webserver API

CISA Alerts & Advisories
Siemens APOGEE, TALON and Desigo PXC/PXM Products

CISA Alerts & Advisories
Siemens Industrial Edge App Publisher

CISA Alerts & Advisories
Siemens Software Center

CISA Alerts & Advisories
InterSystems Corporation InterSystems IRIS for Health

CISA Alerts & Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

CISA Alerts & Advisories
Siemens WinCC

CISA Alerts & Advisories
Siemens Industrial Edge Device Kit

CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW

CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808 Devices

Aikido
eMudhra CA compromise: eight private keys, and one of them is 4

Ars Technica Security
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email

Malwarebytes
Woman faces years in prison over a Cash App account she says she never opened

Eye Security Research
Operation IXIM: Preventing a botnet of millions of Popcorn Time users

Malwarebytes
Delivery bots accused of illegally scanning customers

GitGuardian
Railway October 2026 Incident: Treat Every Environment Variable as Exposed

Escape DAST
php2shell (CVE-2026-109618 + CVE-2026-109619): unauthenticated RCE in PHP core, now detected by Escape