2026-10-20
MIT Technology Review
Taking a swing at a pickleball startup
MIT Technology Review
Nebraska native explores galaxies far, far away
MIT Technology Review
Melt it, spin it, use it again
MIT Technology Review
A reason to eat carbs
MIT Technology Review
Robotic therapy for stroke patients
MIT Technology Review
It’s a bird, it’s a plane … it’s a robo-puffin?
MIT Technology Review
A good TA: priceless
MIT Technology Review
Here’s the tea
MIT Technology Review
A champion for brain injury patients
MIT Technology Review
A cleaner path to rare earth metals
Ars Technica Security
The Internet goes on high alert after discovery of 8 compromised TLS certs
Amazon Security
Managing identity source transition for AWS IAM Identity Center
Talos Intelligence
There's only so much code: the rise in vulnerability numbers
ReversingLabs
Why the Tools You Already Own Won’t Make You PQC-Ready
Mozilla Security
Protecting Firefox users following the compromise of eMudhra intermediate certificates
Ars Technica Security
Meta Muse exposes users' personal and business secrets when they share conversations
CISA Alerts & Advisories
Moxa AIG-302 ThingsPro Edge
CISA Alerts & Advisories
HMS Networks PEAK-System PCAN Windows drivers
CISA Alerts & Advisories
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Hitachi Energy MicroSCADA X SYS600 Product
CISA Alerts & Advisories
Hitachi Energy RTU500 Product
CISA Alerts & Advisories
#StopRansomware: SafePay Ransomware
Schneier on Security
Possible new Cellebrite iPhone Radio Zero-Day
TrustedSec
Handing Pre-Contract FCI and CUI
RCE Security
Imperia CMS <= 11.5.4 SiteActive TEMPLATE Unauthenticated SSTI Remote Code Execution (CVE-2026-110355)
Infernux Blog
Meat_proxy_01, reporting for duty!
2026-10-19
Ars Technica Security
PSA: Patch your Plex media server before someone hacks it
Meta Security
GenRecs Tokenization: Transforming Ads Recommendation at Meta with Stable Model Vocabulary
Meta Security
The Thin Orchestrator: How We Made Our AI Agents More Reliable by Giving the Router Less to Do
Rapid7
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Microsoft Security
Agents are your newest insiders. Security must move at their speed.
Schneier on Security
Training AIs to Solve CAPTCHAs
Malwarebytes
A week in security (October 12 – October 18)
Rosecurify
Seclog - #200
2026-10-18
2026-10-17
2026-10-16
Schneier on Security
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Ars Technica Security
OpenAI models hacked a crypto wallet and breached more websites
Dark Reading
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Filippo Valsorda
The NIST Elliptic Curves Seeds Bounty Has Been Claimed
Dark Reading
AI Takes Control of Robotic Arm in 16 Minutes Flat
Artem Golubin
The future of the internet could be paywalls
Offensive Security
OSCP Exam Guide: What to Expect and How to Prepare
Microsoft Security
Managing open-weight model risk in enterprise deployments
The Citizen Lab
The Lawful Access Act’s threats to Canada’s national security
Cloudflare
Continuous accountability for Verified bots
CISA Alerts & Advisories
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
CISA Alerts & Advisories
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
Schneier on Security
Backdooring Open-Weight AI Models
Malwarebytes
OpenAI sued over children safety and data use
Joshua Rogers
RCE (kind of) in Transmission BitTorrent’s daemon
2026-10-15
Ars Technica Security
Targeted ads delivered 0-click exploits to install mercenary malware
Artem Golubin
Python's binary wheels and supply chain attacks
Meta Security
How Meta Built Forum With AI-Native Engineering
Black Lantern Security
IIS Shortname Enumeration in the Big ‘26
Talos Intelligence
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Google Safety & Security
Check if a text message is a scam using Circle to Search.
Cloudflare
A fully programmable secure web gateway
Schneier on Security
Measuring Human Cryptanalysis Effort
Amazon Security
AWS Security Agent (now part of AWS Continuum) exploited 33 of 37 new real-world CVEs
Meta Security
Sapienz Receives ISSTA 2026 Impact Paper Award
Cloudflare
Deploy with Void
Bishop Fox Security
AI Security Scoping: Define What To Test In Your Deployment
CISA Alerts & Advisories
CISA Malcolm
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
Thermo Fisher Torrent Suite Software
CISA Alerts & Advisories
J4Care dcm4che
CISA Alerts & Advisories
Guangzhou Juan IoT Technology EseeCloud
CISA Alerts & Advisories
Eclipse Foundation Eclipse Milo
Eye Security Research
Cooldown or compromise: the three-day rule for npm and PyPI
Sansec Threat Research
BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)
Star Labs
YuanKong RAT: the Android remote-control service that stamps its operators' names into every build
2026-10-14
Black Hills Info Sec
The Threat Hunting Flywheel: Why Threat Hunting Isn’t About Finding Bad Things
Ars Technica Security
Fridge hack costing millions and sparking fires stemmed from poor security
Amazon Security
Penetration testing every deployment with AWS Continuum
Black Lantern Security
CVE-2026-79957 Insecure Direct Object Reference in ServiceNext
Schneier on Security
Upcoming Speaking Engagements
Schneier on Security
The Future of AI Cryptanalysis
Krebs on Security
U.K. Sanctions Cryptomus for RU Money Laundering
Schneier on Security
Cyberattack on Connected Fridges in France
Talos Intelligence
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
core-jmp
HDD Firmware Hacking Part 1
Bishop Fox Security
Behind Closed Doors: How Physical Penetration Testing Secures Sensitive Conversations
Microsoft Security
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
GitGuardian
Why We Built the Good Samaritan Program
Ars Technica Security
Anthropic warns small AI models could self-replicate through IoT devices
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Trail of Bits
Package managers have an integrity problem
Scott Helme
Passkeys Are Not a Trap
Palo Alto Networks
The Blind Spot in Orbit: Why Space Could Be the Next Infrastructure Crisis