219 Security Blogs

Last Updated: 16 Sep 26 08:01 UTC

Blog List | Github | OPML

2026-09-16

DarkRelay
Container Security: A Practical Guide Across Lifecycle

DarkRelay
OWASP LLM01: Prompt Injection in RAG and AI Agents

ISC SANS
ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096, (Wed, Sep 16th)

Dark Reading
Cyber Op Targets South Korean Media & Automotive Sectors


2026-09-15

Amazon Security
AWS STS simplifies session token size limits and adds session token size monitoring

Dark Reading
Microsoft Issues Emergency Fixes After Massive Patch Tuesday

Dark Reading
Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incident

Amazon Security
Architecting resilient authentication with Amazon Cognito multi-Region replication

MIT Technology Review
Roundtables: Could AI really kill us all?

Dark Reading
VectraRAT Can Hack Windows Enterprises for $250 per Month

Amazon Security
Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline

Malwarebytes
How to opt out of AI chatbot training

ISC SANS
MacOS 27 - First Boot, (Tue, Sep 15th)

GitGuardian
AI Autonomy: How to Find the Autonomy Your Agents Already Have

ReversingLabs
AI coding puts Secure by Design in the spotlight

XBOW
XBOW Integration for Jira is now Available

JFrog
ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

Cloudflare
Have it both ways: stay discoverable in search while disallowing AI training

Cloudflare
Give every teammate and agent the right level of access to your Workers

Wiz
Investing Together: Wiz Defend and Google Security Operations

Rapid7
CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

MIT Technology Review
The Download: AI doomers, whistleblowing agents, and de-aged livers

CISA Alerts & Advisories
mySCADA myPRO Manager

CISA Alerts & Advisories
CareCam CM2507

CISA Alerts & Advisories
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers

CISA Alerts & Advisories
Digital Watchdog VMAX DVR and NVR Product Lineups

CISA News
CISA and NIST Release Guidelines to Protect Federal Cloud Identity Systems from Token Theft, Forgery, and Misuse

CISA Alerts & Advisories
Schneider Electric SCADAPack x70 Products

CISA Alerts & Advisories
Siemens Teamcenter

CISA Alerts & Advisories
Siemens Mendix SAML

CISA Alerts & Advisories
Wärtsilä FOS-Onboard

CISA Alerts & Advisories
Siemens Reyrolle 7SR5

MIT Technology Review
AI models need more data about biology, and OpenAI is paying to create it

Malwarebytes
HBO Max’s verified Reddit account hijacked to spread malware

Schneier on Security
25 Years of Mass Surveillance Is Enough

Trail of Bits
1Password's AI patching benchmark is misleading

Schneier on Security
On the NSA’s Supercomputer from the 1960s

MIT Technology Review
What’s at stake in AI’s trillion-dollar gamble

Malwarebytes
Meta AI builds detailed profiles of children from years of family posts

Malwarebytes
Search results are sending people to fake Bitrefill checkouts

core-jmp
A 0-click Exploit Chain for the Pixel 9, Part 3: Where Do We Go From Here?

core-jmp
A 0-click Exploit Chain for the Pixel 9, Part 2: Cracking the Sandbox with a Big Wave (CVE-2025-36934)

core-jmp
A 0-click Exploit Chain for the Pixel 9, Part 1: Decoding Dolby (CVE-2025-54957)

Snyk
The AI Hurricane Is Here

ISC SANS
ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th)

Datadog HQ
Manage Cursor costs with Datadog Cloud Cost Management

Datadog HQ
How to operate shared platforms safely at agent scale

Datadog HQ
Monitor TAS and gang scheduling for AI training in Kubernetes

Accomplish
Escaping the OpenAI Codex sandbox, twice

CrankySec
Appeal to deez nutz

Fastly
The New DDoS Playbook: Lessons from Khan Academy, Yottaa, and Magnolia


2026-09-14

Dark Reading
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

Eclypsium
Infrastructure Threat Update: Firewalls, AI, & The Edge

Dark Reading
Maximum Severity GitLab Flaw Puts Supply Chains at Risk

Schneier on Security
Upcoming Speaking Engagements

ISC SANS
Apple Updates Everything, (Mon, Sep 14th)

MIT Technology Review
The AI industry has taken a doomer turn. What now?

Amazon Security
AWS Security Reference Architecture: A deep dive into PCI DSS compliance

Socket
Jerod Santo Joins Socket as Head of Media

Dark Reading
Anthropic CEO: Time to Shift From Improving to Controlling AI

Palo Alto Networks
FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security

MIT Technology Review
Donated livers can be made biologically younger

Schneier on Security
Using AI for Weapons Development

MIT Technology Review
AI agents blew the whistle on their cheating colleagues

Aikido
Dependabot vs Renovate

Rapid7
Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR

Xint
Any Android App Can Shut Down the Phone - We Found It in Three Hours Without Source Code

core-jmp
Active Exploitation of Cisco Secure Firewall Management Center: CVE-2026-20079, CVE-2026-20316, Cyclops Blink and Qilin

Malwarebytes
Google’s new search redirects make links harder to check before you click

core-jmp
Domain Credential Dumping via File Handle Redirection

MIT Technology Review
The Download: AI’s real extinction threat and age-reversal tech for eyes

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Malwarebytes
Revolut gave customer IDs and financial data to a government impostor

Schneier on Security
Microsoft’s Patching

core-jmp
From P-Code to GNN: Extracting Binary Code Semantics

Rapid7
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Malwarebytes
A week in security (September 7 – September 13)

ISC SANS
ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

Rosecurify
Seclog - #195

Elastic Security Labs
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

Datadog HQ
Datadog named the Company to Beat for observability platforms in 2026 Gartner® AI Vendor Race report


2026-09-13

Himanshu Anand
I Missed One TLB Shootdown and Somehow Ended Up Controlling a Page Table


2026-09-12

Jericho
The Jericho Blog Graveyard (2003 – 2001)

Jericho
The Jericho Blog Graveyard (2013 – 2021)

MaskRay's Blog
lld 23 ELF changes

DarkRelay
Penetration Testing Cheatsheet: Commands and Quick Reference

Accomplish
Beltdown2: Escaping the Cursor CLI sandbox


2026-09-11

Schneier on Security
Friday Squid Blogging: Rotting Squid on a Beached California Boat

Silverfort
PaperCut breach: What AI agent attacks teach us about Identity Security resilience

Troy Hunt
Weekly Update 521: Breach Perception v. Reality

Dark Reading
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Artem Golubin
Astroturfing on Reddit and the dead internet

Dark Reading
CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate

Dark Reading
SpiderSilk Hunts External Threats With AI-Based Scanner

Dark Reading
Why AI Is So Good at Scamming Humans

Schneier on Security
My Talk at DEF CON

Dark Reading
AI Governance Can't Wait

Dark Reading
Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain

Malwarebytes
Crypto customers targeted by scammers after email marketing provider breach

ISC SANS
The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

Socket
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

Rapid7
Metasploit Wrap Up: This One Goes to Sixteen!

Rapid7
The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

Bishop Fox Security
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key

Cloudflare
Introducing automatic remediation policies with Cloudflare CASB

Malwarebytes
Android malware creates a hidden copy of your banking app

MIT Technology Review
The Download: biotech’s future and cheaper, cleaner steel

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog

Ars Technica Security
ClickFix attacks infecting PCs and Macs are going viral

Schneier on Security
Cliff Stoll’s DEF CON Talk

core-jmp
Bypassing Android Hardware Attestation from the Analyst’s Chair

core-jmp
CVE-2026-20093: Unauthenticated Admin Reset on Cisco IMC

Escape DAST
What an External Penetration Test is And How One is Actually Run

core-jmp
Process ID Mutation via BYOVD: Making Sysmon Blame Notepad

core-jmp
Caeruleus: BLE Security Testing Without the Scavenger Hunt

MIT Technology Review
Meet the under-35s shaping the future of biotech

Resecurity
CISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation

Moonlock
8 tactics behind Spotify scams that steal accounts and data

Moonlock
Hinge scam: How to spot warning signs before they cost you

Moonlock
What an Apple scam actually looks like, from fake emails and texts to calls

Moonlock
AI agents can hack systems and find vulnerabilities. What now?

ISC SANS
ISC Stormcast For Friday, September 11th, 2026 https://isc.sans.edu/podcastdetail/10090, (Fri, Sep 11th)

Dark Reading
Indonesia Hit by Android Banking App-Cloning Campaign

Moonlock
Can Macs be hacked and how can you tell if your Mac has been hacked?

Accomplish
Beltdown: Escaping the Claude Code sandbox

Datadog HQ
Analyze your experiments in ChatGPT with the Datadog Experiments plugin

Elastic Security Labs
Linux Detection Engineering - Local Privilege Escalation

Semgrep
Meet the Semgrep Interns: Four Projects from Summer 2026

Datadog HQ
Understanding NetFlow duplication: Why it happens, and how to deduplicate

Auth0
A Developer's Guide to API Access Policies in Auth0

Auth0
Adding Google Login to a React App with Auth0


2026-09-10

Socket
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack

Dark Reading
Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

Offensive Security
Are Security Teams Keeping Pace With AI-Accelerated Threats?

Wiz
Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

Palo Alto Networks
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Talos Intelligence
We've got one word for it, and it's usually the wrong one

Microsoft Security
Protecting organizations from AI-assisted executive impersonation and invoice fraud

The Citizen Lab
Group of Bipartisan Lawmakers Ask US Government to Ban Several Hack-for-Hire Firms

Microsoft Security
Detect and disrupt AI-themed attacks with Microsoft Defender

Malwarebytes
BlueMoon exploit kit turns Chrome and Windows flaws into attacks

Dark Reading
Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit

ReversingLabs
Rubrik + RL: Bring Threat Intelligence and Detection to Backups

Mend
Detection scaled. The loop did not.

Palo Alto Networks
Secure AI Coding: Governing every agent, artifact, and identity

Silverfort
AI agent intent, explained: What Silverfort actually means when we say it

Bishop Fox Security
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

Cloudflare
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

ISC SANS
Redtail Payload Analysis [Guest Diary], (Wed, Sep 9th)

Malwarebytes
Will AI kill us all within the next decade?

CISA Alerts & Advisories
AVEVA Pipeline Integrity Monitor

CISA Alerts & Advisories
Orthanc DICOM Server

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
NextGen Healthcare Mirth Connect

CISA Alerts & Advisories
ST Engineering iDirect iQ-Series Terminals (Update A)

Wiz
Wiz achieves GovRAMP High Authorization

Malwarebytes
Update Chrome now to protect against an actively exploited vulnerability

Schneier on Security
AIs Compress Exploit Timeline

ISC SANS
ISC Stormcast For Thursday, September 10th, 2026 https://isc.sans.edu/podcastdetail/10088, (Thu, Sep 10th)

Aikido
The CVE spike across major software companies is a remediation problem

Malwarebytes
Copyright scammers get Instagram accounts suspended and demand payment

Escape DAST
How to build a continuous pentesting program

Dark Reading
EU Cyber Resilience Act to Enforce New Reporting Requirements

Snyk
Is prevention essentially a solved problem?

TrustedSec
So… You Found AWS Access Keys (Part 1)

Moonlock
Trojanized Mac installers are posing as The Unarchiver and other popular apps

Moonlock
Black Friday scams: 11 ways scammers trick online shoppers

Datadog HQ
How we built Datadog Experiments

Datadog HQ
Troubleshoot Kafka issues across every layer of your stack with Kafka Console

Auth0
Why You're Getting 429s in Production Using Auth0 and How to Stop Them


2026-09-09

Doyensec
Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability

Socket
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Microsoft Security
Threat matrix: Mapping threats across cloud web applications

Dark Reading
Mythos Vulnerability Firehose Hits a Human Bottleneck

Ars Technica Security
Four groups caught using the same Chrome and Windows exploit kit

Dark Reading
US Government Accuses Chinese AI Firms of Distilling Frontier Models

Amazon Security
The state of AI for security: Measuring what matters most for building trust

ISC SANS
Scans for Proxmox Servers, (Wed, Sep 9th)

Microsoft Security
Passkey-themed social engineering leads to identity and cloud compromise

Talos Intelligence
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Wiz
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise

Schneier on Security
Driver’s License Data for Sale

Xint
One Month On Since the Hugging Face Hack, What Have We Learned About AI Threats and Autonomous Defense?

Rapid7
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

Malwarebytes
More than 100,000 fake stores are out to steal your card details

ReversingLabs
OpenAI: Hugging Face mob agent incident is 'a warning shot'

Dark Reading
Identity-Based AI Attack Threatens Security of Enterprise Data

Cloudflare
How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility

CISA News
CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

Trail of Bits
A “proof” of Fermat’s Last Theorem that fits the margin

Escape DAST
How Amp got its SOC 2 type II pentest evidence in hours

Malwarebytes
Microsoft fixes record 964 flaws, including 2 exploited zero-days

Malwarebytes
The push to stop algorithms controlling social media feeds has begun