219 Security Blogs

Last Updated: 07 Sep 26 09:30 UTC

Blog List | Github | OPML

2026-11-12

Dark Reading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI


2026-10-08

Dark Reading
[Virtual Event] Building a Secure AI Strategy for the Enterprise


2026-09-07

Scott Helme
No Hacking Required: The Manchester Airports Group Data Breach

Malwarebytes
A week in security (August 31 – September 6)


2026-09-06

Troy Hunt
Weekly Update 520: The Unscripted Edition

ISC SANS
Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)

Infernux Blog
Drawing to understand


2026-09-05

ISC SANS
numbat - AI agent observability, (Fri, Sep 4th)

Sansec Threat Research
StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attack


2026-09-04

Ars Technica Security
OpenAI agents discussed ways to escape their sandbox on public wiki

Schneier on Security
Friday Squid Blogging: Squid on a Stick at the New York State Fair

Microsoft Security
How to secure edge AI in customer-owned environments

MIT Technology Review
Architecting memory and storage in the AI era

Amazon Security
OSPAR 2026 report now available with 167 services in scope

Ars Technica Security
Once popular for attacking AI, ASCII smuggling is embraced by spammers

Malwarebytes
The hidden work of modernizing Malwarebytes

Socket
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing

Schneier on Security
Using a VM to Contain an AI Agent

Dark Reading
Companies Have 6 Months to Prepare for Automated Attacks

Aikido
Dirty Frag (CVE-2026-43284): the Linux kernel bug that turns read access into root

Aikido
Stop breaking SLAs: how to patch vulnerabilities before the fix even ships

Aikido
Top Trivy alternatives for container and cloud scanning in 2026

Dark Reading
AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

Malwarebytes
X Money rollout linked to password-reset attacks

Dark Reading
Insurers Search for Answers to Rein in Rogue AI

MIT Technology Review
The Download: selling battlefield drone data and AI reshaping language

Rapid7
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Schneier on Security
Security Vulnerability in a Voting System

Schneier on Security
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

MIT Technology Review
Data from drones in Ukraine is fueling a new Wild West marketplace

Malwarebytes
Free streaming boxes may be routing criminal traffic through your home

Binarly
Top 10 Vulnerability Management Tools in 2026

Moonlock
A hidden prompt could trick AI into leaking your private conversations

Moonlock
New AI phishing kit is helping thieves unlock stolen iPhones and Macs

Moonlock
This fake Apple Pay alert is designed specifically to fool iPhone users

ISC SANS
ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)

Elastic Security Labs
Data access: the hidden cost of security vendor lock-in

zerotistic
Hey Siri, welcome to my Minecraft server

Datadog HQ
Stop runtime threats with Workload Protection response actions

Semgrep
Shift Right? After 20 Years of Shift Left?


2026-09-03

MalwareTech
Machine Speed is a lie: stop trying to fight AI with AI

Mend
Mend Renovate Enterprise: managing dependencies at agentic scale

Amazon Security
Incident response guide for AWS CloudTrail investigations – Part 2

Amazon Security
Incident response guide for AWS CloudTrail investigations – Part 1

Cloudflare
Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models

Dark Reading
Large Enterprises Targeted in Fake Merger & Acquisition Scams

Ars Technica Security
Confused about which VPN is right, US senator asks the NSA for guidance

Dark Reading
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?

Talos Intelligence
The story behind the intelligence

Aikido
MECCHA CHAMELEON can't hide from the RCE

Dark Reading
What the AI Warning Letter Completely Missed

Eclypsium
BTS #81 - Infratrust Pulse, AI's Role in Security

Malwarebytes
StreamRat Android malware spreads through Meta and TikTok ads

Meta Security
ZGateway: Learnings from Putting a Proxy in Front of ZippyDB

Microsoft Security
ASCII smuggling crosses over from AI prompt injection to phishing evasion

ReversingLabs
Best Enterprise File Scanning Tools of 2026

Dark Reading
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours

Silverfort
It’s the swan song of traditional PAM, and that’s good news for security

Bishop Fox Security
Signature Optional - Analysis of CVE-2026-28323

Red Siege InfoSec Blog
Improving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition

MIT Technology Review
The Download: rethinking child safety and fossil-fueled farming

CISA Alerts & Advisories
Inductive Automation Ignition

Dark Reading
'Breeze Comet' Tears Into Brazilian & Global Financial Systems

CISA Alerts & Advisories
OPCFoundation OPC UA LocalDiscoveryServer (LDS)

CISA Alerts & Advisories
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)

CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB2 (Update A)

CISA Alerts & Advisories
Rockwell Automation 1756-ENBT Module

CISA Alerts & Advisories
Rockwell Automation ControlFLASH

CISA Alerts & Advisories
Rockwell Automation ArmorStart LT

CISA Alerts & Advisories
Preparing for the Post-Quantum Era: A Call to Action

CISA Alerts & Advisories
IXON VPN Client

CISA Alerts & Advisories
Pyramid Solutions NetStaX EtherNet/IP Stack

CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB3

Schneier on Security
Researching Employment Scams

MIT Technology Review
Agriculture relies on fossil fuels. It’s costing us.

MIT Technology Review
Scaling agentic AI pilots across the enterprise

Malwarebytes
Your phone or computer may soon ask how old you are

Hunt and Hackett
Recent cyberattacks show how little organisations really know during an incident

Compass Security Blog
CRA Reporting – What you need to know

TrustedSec
LLMHaxor Update

ISC SANS
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)

ISC SANS
ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)

Wiz
How Developers Prevent Production Risk at the Source

Fastly
CVE-2026-82329: JFrog Artifactory Authentication Bypass Exploitation Activity

Auth0
Five Reasons Why Your Auth0 Permissions Are Not in your Access Token

Teleport Blog
ISO 42001 Evidence: What Auditors Ask For

Datadog HQ
Build and run Datadog workflows from Bits Chat or AI agents

Fastly
Building Fastly Log Analytics Tools: An Open-Source Approach to Deeper Insights


2026-09-02

Microsoft Security
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Dark Reading
AI's Vulnerability Surge May Be More Manageable Than First Feared

Dark Reading
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

Amazon Security
Managing identity source transition for AWS IAM Identity Center

Ars Technica Security
I rented a car, and within hours, my driver's license was for sale

Dark Reading
AI Gives Cybercriminals a Dangerous Time Advantage

Binarly
Containers Don't Keep Secrets: Scanning Docker Hub for Leaked Credentials and Private Keys

Amazon Security
Agentic security: Detection and response at machine speed

Schneier on Security
AI Agents Are Now Emailing Me with Their Security Concerns

Rapid7
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Dark Reading
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users

Google Safety & Security
Our latest Linux Foundation Europe donation will build a more private digital world.

Malwarebytes
Tech support scams look different now. Here’s what to watch for

Eclypsium
Cybersecurity Insiders: AI Infrastructure’s Firmware Problem Is Bigger Than Any Single Vendor

Google Safety & Security
Proactive cyber defense for governments and enterprises

Jericho
Lazy Movie Headlines Are Lazy

GitGuardian
OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

ReversingLabs
Get the Spectra Assure Community Plugin for JFrog Artifactory

The Citizen Lab
U.K. Supreme Court Opens Door for Spyware Victims to Sue Foreign States

Xint
Finding Bugs Isn’t Enough: The Difference Between Pointing LLMs to Find Bugs and a Mature AI AppSec Platform

MIT Technology Review
Facilitating AI integration with simplicity at scale

core-jmp
Privilege Escalation from IIS AppPool to NT Authority/SYSTEM via AD CS RPC Endpoint

Malwarebytes
Scammers are getting smarter about where they target you 

MIT Technology Review
The Download: AI puzzles and a path to our nearest star system

CISA Alerts & Advisories
CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Communicating Under Pressure: Best Practices for Service Providers

core-jmp
CATAnA: Exploring the Dangers of SIM-Originating AT Commands in Cellular Devices

core-jmp
Proxmox VE 7.0–8.0.3: Unauthenticated Single-Request Root Auth Bypass (CVE-2023-54391)

Malwarebytes
Two critical Chrome flaws put users at risk on malicious websites

core-jmp
Singularity Rootkit: Evading Elastic Defend Module Load Detection

Ars Technica Security
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

Schneier on Security
Wireless Routers as Motion Detectors

Step Security
Introducing deny list egress policies for Harden-Runner

Step Security
Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners

Malwarebytes
153M+ driver’s licenses for sale on new dark web platform

Malwarebytes
Your AI chats could be used in court

Meta Security
An Organizational Second Brain: Building an AI That Learns From Experts

ISC SANS
ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)

Dark Reading
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Fastly
Building for the Model Hardware Standard

Datadog HQ
Monitor prompt caching to optimize your token usage


2026-09-01

Microsoft Security
Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Krebs on Security
FBI Probes Service Selling 153M+ Drivers Licenses

Troy Hunt
Weekly Update 519: Breaches & Data Integrity

ISC SANS
Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st)

Dark Reading
Attackers Pounce on Critical Artifactory Bug Following Disclosure

Dark Reading
Stronger Security Drives Ransomware Groups to Recruit From Within

Dark Reading
Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise

Dark Reading
AI Model Evaluator METR Hit by Credential Theft, Probing

MIT Technology Review
How AI plotted an interstellar journey to Alpha Centauri

Microsoft Security
Cybersecurity IR Workshop: The workshop you shouldn’t miss

Socket
Microsoft Teams Notifications Are Now Available in Socket

Schneier on Security
What’s the Scam?

Aikido
Top DSPM tools in 2026

Schneier on Security
Leaked Russian Cyber-Operations Training Materials

Malwarebytes
Fake GTA 6 leaked copy drains your crypto wallet

Jericho
Odds Are You Are Responsible for that Traffic Slowdown

GitGuardian
Credential Security: What Endpoint Protection Really Means for Secrets

ReversingLabs
How to build effective agentic SOCs: What you need to know

Aikido
The dark figure of supply chain detection

MIT Technology Review
Making the AI-powered case for legacy modernization

Dark Reading
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain

ToxSec
Security Through Obscurity Is Running Out of Time

Cloudflare
How we could save petabytes of cache storage with Zstandard and Pingora

Malwarebytes
TerminalFix looks like ClickFix, but delivers a very different payload

CISA Alerts & Advisories
Rockwell Automation FactoryTalk Activation Manager

CISA Alerts & Advisories
Rockwell Automation Logix Platform

CISA Alerts & Advisories
Rockwell Automation Redundancy Module Configuration Tool

CISA Alerts & Advisories
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix

CISA Alerts & Advisories
Rockwell Automation Historian ME

CISA Alerts & Advisories
Rockwell Automation RSLinx Classic

Wiz
Introducing Continuous Vulnerability Assessment: Real-Time Defense for the AI Threat Era

Malwarebytes
Infostealers are hijacking Claude accounts at users’ expense

Schneier on Security
Rewiring Democracy Series on The Renovator

clearbluejar's Blog
Don't Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models

TrustedSec
waf-fu, or Some Log Replay Nonsense

Socket
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%

ISC SANS
ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st)

Rosecurify
Seclog - #193

Datadog HQ
Visualize how CUPED adjusts experiment results with Datadog

Datadog HQ
From traces to experiments: A loop for improving AI agents

Datadog HQ
Making Rust observability reliable at scale with OpenTelemetry

Auth0
How to Make Your AI Agent Enterprise-Ready: Enabling Enterprise-Managed Authorization for Client Apps in Auth0

Fastly
Preserving Analytics Attribution During Bot Challenges: A Fastly VCL & NGWAF Deep Dive

Nebula Security
Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu


2026-08-31

Dark Reading
Anthropic Users Hit by Infostealer Attacks, Session Thefts

Socket
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat

Dark Reading
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks

Dark Reading
The Guardrails Debate: Security Researcher Changes His Mind

Hybrid Analysis Blog
Hybrid Analysis, Reengineered

ISC SANS
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)

Amazon Security
We invited a direct competitor into Security Hub Extended. Here’s why.

Dark Reading
AI Model Rules Are Not Security Controls

Auth0
Securing Agentic Commerce

Amazon Security
Automate IAM Identity Center governance with continuous discovery and reporting

Ars Technica Security
Think twice before installing this device promising free movies

Include Security
EncryptedSharedPreferences is Dead: Here’s What You Should Use Instead

Jericho
How Much Lipstick Can That CVE Pig Wear?

GitGuardian
AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

Malwarebytes
McKesson confirms cyber incident after ShinyHunters claims patient-data theft

Socket
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds

Bishop Fox Security
Traefik | Version Through 3.7.11

Cloudflare
Introducing Adaptive Intelligence: Undermining the economics of every bot attack

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog