219 Security Blogs

Last Updated: 12 Sep 26 02:45 UTC

Blog List | Github | OPML

2026-09-11

Schneier on Security
Friday Squid Blogging: Rotting Squid on a Beached California Boat

Silverfort
PaperCut breach: What AI agent attacks teach us about Identity Security resilience

Troy Hunt
Weekly Update 521: Breach Perception v. Reality

MIT Technology Review
Roundtables: AI’s apocalypse crisis

Dark Reading
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Artem Golubin
Astroturfing on Reddit and the dead internet

Dark Reading
CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate

Dark Reading
Why AI Is So Good at Scamming Humans

Schneier on Security
My Talk at DEF CON

Dark Reading
AI Governance Can't Wait

Dark Reading
Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain

Malwarebytes
Crypto customers targeted by scammers after email marketing provider breach

ISC SANS
The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

Socket
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

Rapid7
Metasploit Wrap Up: This One Goes to Sixteen!

Rapid7
The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

Bishop Fox Security
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key

Cloudflare
Introducing automatic remediation policies with Cloudflare CASB

Malwarebytes
Android malware creates a hidden copy of your banking app

MIT Technology Review
The Download: biotech’s future and cheaper, cleaner steel

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog

Ars Technica Security
ClickFix attacks infecting PCs and Macs are going viral

Schneier on Security
Cliff Stoll’s DEF CON Talk

core-jmp
Bypassing Android Hardware Attestation from the Analyst’s Chair

core-jmp
CVE-2026-20093: Unauthenticated Admin Reset on Cisco IMC

Escape DAST
What an external penetration test is and how one is actually run

core-jmp
Process ID Mutation via BYOVD: Making Sysmon Blame Notepad

core-jmp
Caeruleus: BLE Security Testing Without the Scavenger Hunt

core-jmp
From Job Offer to Ring 0: Lazarus, CVE-2026-68820 and FudModule 3.1

MIT Technology Review
Meet the under-35s shaping the future of biotech

Moonlock
8 tactics behind Spotify scams that steal accounts and data

Moonlock
AI agents can hack systems and find vulnerabilities. What now?

Moonlock
What an Apple scam actually looks like, from fake emails and texts to calls

Moonlock
Hinge scam: How to spot warning signs before they cost you

ISC SANS
ISC Stormcast For Friday, September 11th, 2026 https://isc.sans.edu/podcastdetail/10090, (Fri, Sep 11th)

Dark Reading
Indonesia Hit by Android Banking App-Cloning Campaign

Auth0
Adding Google Login to a React App with Auth0

Elastic Security Labs
Linux Detection Engineering - Local Privilege Escalation

Semgrep
Meet the Semgrep Interns: Four Projects from Summer 2026

Datadog HQ
Understanding NetFlow duplication: Why it happens, and how to deduplicate

Datadog HQ
Analyze your experiments in ChatGPT with the Datadog Experiments plugin

Accomplish
Beltdown: Escaping the Claude Code sandbox

Auth0
A Developer's Guide to API Access Policies in Auth0


2026-09-10

Socket
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack

Dark Reading
Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

Offensive Security
Are Security Teams Keeping Pace With AI-Accelerated Threats?

Wiz
Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

Palo Alto Networks
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Talos Intelligence
We've got one word for it, and it's usually the wrong one

Microsoft Security
Protecting organizations from AI-assisted executive impersonation and invoice fraud

The Citizen Lab
Group of Bipartisan Lawmakers Ask US Government to Ban Several Hack-for-Hire Firms

Microsoft Security
Detect and disrupt AI-themed attacks with Microsoft Defender

Malwarebytes
BlueMoon exploit kit turns Chrome and Windows flaws into attacks

Dark Reading
Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit

ReversingLabs
Rubrik + RL: Bring Threat Intelligence and Detection to Backups

Mend
Detection scaled. The loop did not.

Palo Alto Networks
Secure AI Coding: Governing every agent, artifact, and identity

Silverfort
AI agent intent, explained: What Silverfort actually means when we say it

Cloudflare
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

Bishop Fox Security
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

ISC SANS
Redtail Payload Analysis [Guest Diary], (Wed, Sep 9th)

Malwarebytes
Will AI kill us all within the next decade?

MIT Technology Review
The Download: a “God-driven” cryptocurrency and a solar engineering roadmap

CISA Alerts & Advisories
ST Engineering iDirect iQ-Series Terminals (Update A)

CISA Alerts & Advisories
NextGen Healthcare Mirth Connect

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Orthanc DICOM Server

CISA Alerts & Advisories
AVEVA Pipeline Integrity Monitor

MIT Technology Review
This road map could help us decide whether to deploy solar geoengineering

Wiz
Wiz achieves GovRAMP High Authorization

MIT Technology Review
Powering AI is an architecture problem

core-jmp
KERAT: Static Detection of Kernel TOCTOU Bugs Caused by Races

Malwarebytes
Update Chrome now to protect against an actively exploited vulnerability

Schneier on Security
AIs Compress Exploit Timeline

core-jmp
Manual LDAP Querying, Part 2: Nested Groups, UAC Bits, Trusts, and Foreign SIDs

core-jmp
Manual Active Directory Querying with dsquery and ldapsearch

ISC SANS
ISC Stormcast For Thursday, September 10th, 2026 https://isc.sans.edu/podcastdetail/10088, (Thu, Sep 10th)

Aikido
The CVE spike across major software companies is a remediation problem

MIT Technology Review
Can the US battery market untangle from China?

Malwarebytes
Copyright scammers get Instagram accounts suspended and demand payment

MIT Technology Review
God told them to sell crypto. Their investors lost everything.

MIT Technology Review
Healthcare AI’s next test is integration

Escape DAST
How to build a continuous pentesting program

Dark Reading
EU Cyber Resilience Act to Enforce New Reporting Requirements

TrustedSec
So… You Found AWS Access Keys (Part 1)

Snyk
Is prevention essentially a solved problem?

Moonlock
Trojanized Mac installers are posing as The Unarchiver and other popular apps

Moonlock
Black Friday scams: 11 ways scammers trick online shoppers

Datadog HQ
Troubleshoot Kafka issues across every layer of your stack with Kafka Console

Auth0
Why You're Getting 429s in Production Using Auth0 and How to Stop Them

Datadog HQ
How we built Datadog Experiments


2026-09-09

Doyensec
Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability

Socket
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Microsoft Security
Threat matrix: Mapping threats across cloud web applications

Dark Reading
Mythos Vulnerability Firehose Hits a Human Bottleneck

Ars Technica Security
Four groups caught using the same Chrome and Windows exploit kit

Dark Reading
US Government Accuses Chinese AI Firms of Distilling Frontier Models

Amazon Security
The state of AI for security: Measuring what matters most for building trust

ISC SANS
Scans for Proxmox Servers, (Wed, Sep 9th)

Microsoft Security
Passkey-themed social engineering leads to identity and cloud compromise

Talos Intelligence
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Wiz
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise

Schneier on Security
Driver’s License Data for Sale

Xint
One Month On Since the Hugging Face Hack, What Have We Learned About AI Threats and Autonomous Defense?

Rapid7
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

Malwarebytes
More than 100,000 fake stores are out to steal your card details

ReversingLabs
OpenAI: Hugging Face mob agent incident is 'a warning shot'

Dark Reading
Identity-Based AI Attack Threatens Security of Enterprise Data

core-jmp
CVE-2024-20356: Jailbreaking a Cisco Email Appliance to Run DOOM

Cloudflare
How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility

MIT Technology Review
The Download: OpenAI’s turning point for math and a battery record

core-jmp
How Can You Not Be Romantic About UNIX Domain Sockets: A 40-Year Kernel Bug From the DEF CON Stage

CISA News
CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

Schneier on Security
Claude Fable Solves a Historical Cipher

Trail of Bits
A “proof” of Fermat’s Last Theorem that fits the margin

Escape DAST
How Amp got its SOC 2 type II pentest evidence in hours

Malwarebytes
Microsoft fixes record 964 flaws, including 2 exploited zero-days

Malwarebytes
The push to stop algorithms controlling social media feeds has begun

ISC SANS
ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)

Datadog HQ
How we built data-driven AI Golden Paths at Datadog

Fastly
CMCDv2: Leveling Up Your Video Streaming Telemetry

Yunus Aydın
Bypassing Family Link’s website blocklist with a trailing dot

Yunus Aydın
Family Link site engelini sonuna nokta koyarak atlatmak

Greynoise
Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

Teleport Blog
FIPS 140-2 vs FIPS 140-3, Explained


2026-09-08

Talos Intelligence
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Krebs on Security
Microsoft Plugs Nearly 1,000 Security Holes

Rapid7
Patch Tuesday - September 2026

Dark Reading
Patch Tuesday Sets Another Record With 974 CVEs

Ars Technica Security
Why this month's Microsoft patch release is a doozy

Dark Reading
Attackers Use Multi-Hop Google Redirects for Phishing Campaign

Dark Reading
OpenAI Agents Took Over Wiki Site Before Hugging Face Attack

ISC SANS
September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)

Aikido
Jason Haddix: Stop fearing AI pentesting

Zero Day Initiative
The September 2026 Security Update Review

Dark Reading
ClickFix Campaigns Abuse Legitimate Services for Persistent Access

Schneier on Security
AIs as Modern Genies

Aikido
Compromised Flutter package on pub.dev contains XCSSET malware

GitGuardian
Service Account Credential Rotation: The Blast-Radius Checklist

ReversingLabs
AI summary attack conceals code that tampers with LLMs

Cloudflare
Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)

Malwarebytes
Grindr settles HIV status data-sharing lawsuit for $35 million

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

Dark Reading
Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites

CISA Alerts & Advisories
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies

CISA News
CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale Knowledge Distillation Campaigns to Shortcut AI Development

CISA Alerts & Advisories
CareCam Pro IP Cameras

Rapid7
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

Schneier on Security
Stealing AI Reasoning Traces

Talos Intelligence
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Talos Intelligence
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

Malwarebytes
MikroTik router flaws allow takeover without a password

ISC SANS
ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)

Fastly
Accelerate Migrations: Introducing Direct Fetch for Fastly Object Storage

Rosecurify
Seclog - #194

Okta Security
Hunting Vulnerabilities Using Frontier Models

Datadog HQ
Coordinate product launches with Datadog

Auth0
Audit Your Auth0 Tenant with Auth0 Agent Skills


2026-09-07

Malwarebytes
Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)

GitGuardian
AI Created a Leaked Credentials Flood: Here's How We're Draining It

Malwarebytes
LG TV flaws could let attackers listen in, even in standby mode

Aikido
Shai-Hulud Rises From the Dead after 111 days

Aikido
StyleSmuggler fix: patch the Magento and Adobe Commerce RCE

Malwarebytes
Flirty OnlyFans promoters on X may be using AI to appear human

Schneier on Security
Automobile Camouflage to Hide from Flock Cameras

Scott Helme
No Hacking Required: The Manchester Airports Group Data Breach

Malwarebytes
A week in security (August 31 – September 6)

Infernux Blog
Log Horizon 0.9.0


2026-09-06

Troy Hunt
Weekly Update 520: The Unscripted Edition

ISC SANS
Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)

Infernux Blog
Drawing to understand


2026-09-05

ISC SANS
numbat - AI agent observability, (Fri, Sep 4th)