219 Security Blogs

Last Updated: 15 Sep 26 08:01 UTC

Blog List | Github | OPML

2026-09-15

ISC SANS
ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th)


2026-09-14

Dark Reading
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

Eclypsium
Infrastructure Threat Update: Firewalls, AI, & The Edge

Dark Reading
Maximum Severity GitLab Flaw Puts Supply Chains at Risk

Schneier on Security
Upcoming Speaking Engagements

ISC SANS
Apple Updates Everything, (Mon, Sep 14th)

MIT Technology Review
The AI industry has taken a doomer turn. What now?

Amazon Security
AWS Security Reference Architecture: A deep dive into PCI DSS compliance

Socket
Jerod Santo Joins Socket as Head of Media

Dark Reading
Anthropic CEO: Time to Shift From Improving to Controlling AI

Palo Alto Networks
FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security

MIT Technology Review
Donated livers can be made biologically younger

Schneier on Security
Using AI for Weapons Development

MIT Technology Review
AI agents blew the whistle on their cheating colleagues

Aikido
Dependabot vs Renovate

Rapid7
Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR

Xint
Any Android App Can Shut Down the Phone - We Found It in Three Hours Without Source Code

core-jmp
Active Exploitation of Cisco Secure Firewall Management Center: CVE-2026-20079, CVE-2026-20316, Cyclops Blink and Qilin

Malwarebytes
Google’s new search redirects make links harder to check before you click

core-jmp
Domain Credential Dumping via File Handle Redirection

MIT Technology Review
The Download: AI’s real extinction threat and age-reversal tech for eyes

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Malwarebytes
Revolut gave customer IDs and financial data to a government impostor

Schneier on Security
Microsoft’s Patching

core-jmp
From P-Code to GNN: Extracting Binary Code Semantics

Rapid7
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Malwarebytes
A week in security (September 7 – September 13)

ISC SANS
ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

Rosecurify
Seclog - #195

Datadog HQ
Datadog named the Company to Beat for observability platforms in 2026 Gartner® AI Vendor Race report


2026-09-13

Himanshu Anand
I Missed One TLB Shootdown and Somehow Ended Up Controlling a Page Table


2026-09-12

MaskRay's Blog
lld 23 ELF changes

DarkRelay
Penetration Testing Cheatsheet: Commands and Quick Reference

Accomplish
Beltdown2: Escaping the Cursor CLI sandbox


2026-09-11

Schneier on Security
Friday Squid Blogging: Rotting Squid on a Beached California Boat

Silverfort
PaperCut breach: What AI agent attacks teach us about Identity Security resilience

Troy Hunt
Weekly Update 521: Breach Perception v. Reality

MIT Technology Review
Roundtables: Could AI really kill us all?

Dark Reading
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Artem Golubin
Astroturfing on Reddit and the dead internet

Dark Reading
CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate

Dark Reading
SpiderSilk Hunts External Threats With AI-Based Scanner

Dark Reading
Why AI Is So Good at Scamming Humans

Schneier on Security
My Talk at DEF CON

Dark Reading
AI Governance Can't Wait

Dark Reading
Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain

Malwarebytes
Crypto customers targeted by scammers after email marketing provider breach

ISC SANS
The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

Socket
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

Rapid7
Metasploit Wrap Up: This One Goes to Sixteen!

Rapid7
The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

Cloudflare
Introducing automatic remediation policies with Cloudflare CASB

Bishop Fox Security
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key

Malwarebytes
Android malware creates a hidden copy of your banking app

MIT Technology Review
The Download: biotech’s future and cheaper, cleaner steel

CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Ars Technica Security
ClickFix attacks infecting PCs and Macs are going viral

Schneier on Security
Cliff Stoll’s DEF CON Talk

core-jmp
Bypassing Android Hardware Attestation from the Analyst’s Chair

core-jmp
CVE-2026-20093: Unauthenticated Admin Reset on Cisco IMC

Escape DAST
What an external penetration test is and how one is actually run

core-jmp
Process ID Mutation via BYOVD: Making Sysmon Blame Notepad

core-jmp
Caeruleus: BLE Security Testing Without the Scavenger Hunt

core-jmp
From Job Offer to Ring 0: Lazarus, CVE-2026-68820 and FudModule 3.1

MIT Technology Review
Meet the under-35s shaping the future of biotech

Resecurity
CISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation

Moonlock
8 tactics behind Spotify scams that steal accounts and data

Moonlock
Hinge scam: How to spot warning signs before they cost you

Moonlock
What an Apple scam actually looks like, from fake emails and texts to calls

Moonlock
AI agents can hack systems and find vulnerabilities. What now?

ISC SANS
ISC Stormcast For Friday, September 11th, 2026 https://isc.sans.edu/podcastdetail/10090, (Fri, Sep 11th)

Dark Reading
Indonesia Hit by Android Banking App-Cloning Campaign

Moonlock
Can Macs be hacked and how can you tell if your Mac has been hacked?

Datadog HQ
Analyze your experiments in ChatGPT with the Datadog Experiments plugin

Auth0
Adding Google Login to a React App with Auth0

Auth0
A Developer's Guide to API Access Policies in Auth0

Semgrep
Meet the Semgrep Interns: Four Projects from Summer 2026

Datadog HQ
Understanding NetFlow duplication: Why it happens, and how to deduplicate

Accomplish
Beltdown: Escaping the Claude Code sandbox

Elastic Security Labs
Linux Detection Engineering - Local Privilege Escalation


2026-09-10

Socket
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack

Dark Reading
Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

Offensive Security
Are Security Teams Keeping Pace With AI-Accelerated Threats?

Wiz
Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

Palo Alto Networks
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Talos Intelligence
We've got one word for it, and it's usually the wrong one

Microsoft Security
Protecting organizations from AI-assisted executive impersonation and invoice fraud

The Citizen Lab
Group of Bipartisan Lawmakers Ask US Government to Ban Several Hack-for-Hire Firms

Microsoft Security
Detect and disrupt AI-themed attacks with Microsoft Defender

Malwarebytes
BlueMoon exploit kit turns Chrome and Windows flaws into attacks

Dark Reading
Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit

ReversingLabs
Rubrik + RL: Bring Threat Intelligence and Detection to Backups

Mend
Detection scaled. The loop did not.

Palo Alto Networks
Secure AI Coding: Governing every agent, artifact, and identity

Silverfort
AI agent intent, explained: What Silverfort actually means when we say it

Cloudflare
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

Bishop Fox Security
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

ISC SANS
Redtail Payload Analysis [Guest Diary], (Wed, Sep 9th)

Malwarebytes
Will AI kill us all within the next decade?

MIT Technology Review
The Download: a “God-driven” cryptocurrency and a solar engineering roadmap

CISA Alerts & Advisories
ST Engineering iDirect iQ-Series Terminals (Update A)

CISA Alerts & Advisories
Orthanc DICOM Server

CISA Alerts & Advisories
NextGen Healthcare Mirth Connect

CISA Alerts & Advisories
AVEVA Pipeline Integrity Monitor

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

MIT Technology Review
Powering AI is an architecture problem

MIT Technology Review
This road map could help us decide whether to deploy solar geoengineering

Wiz
Wiz achieves GovRAMP High Authorization

core-jmp
KERAT: Static Detection of Kernel TOCTOU Bugs Caused by Races

Malwarebytes
Update Chrome now to protect against an actively exploited vulnerability

Schneier on Security
AIs Compress Exploit Timeline

core-jmp
Manual LDAP Querying, Part 2: Nested Groups, UAC Bits, Trusts, and Foreign SIDs

ISC SANS
ISC Stormcast For Thursday, September 10th, 2026 https://isc.sans.edu/podcastdetail/10088, (Thu, Sep 10th)

Aikido
The CVE spike across major software companies is a remediation problem

Malwarebytes
Copyright scammers get Instagram accounts suspended and demand payment

Escape DAST
How to build a continuous pentesting program

Dark Reading
EU Cyber Resilience Act to Enforce New Reporting Requirements

TrustedSec
So… You Found AWS Access Keys (Part 1)

Snyk
Is prevention essentially a solved problem?

Moonlock
Trojanized Mac installers are posing as The Unarchiver and other popular apps

Moonlock
Black Friday scams: 11 ways scammers trick online shoppers

Auth0
Why You're Getting 429s in Production Using Auth0 and How to Stop Them

Datadog HQ
How we built Datadog Experiments

Datadog HQ
Troubleshoot Kafka issues across every layer of your stack with Kafka Console


2026-09-09

Doyensec
Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability

Socket
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Microsoft Security
Threat matrix: Mapping threats across cloud web applications

Dark Reading
Mythos Vulnerability Firehose Hits a Human Bottleneck

Ars Technica Security
Four groups caught using the same Chrome and Windows exploit kit

Dark Reading
US Government Accuses Chinese AI Firms of Distilling Frontier Models

Amazon Security
The state of AI for security: Measuring what matters most for building trust

ISC SANS
Scans for Proxmox Servers, (Wed, Sep 9th)

Microsoft Security
Passkey-themed social engineering leads to identity and cloud compromise

Talos Intelligence
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Wiz
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise

Schneier on Security
Driver’s License Data for Sale

Xint
One Month On Since the Hugging Face Hack, What Have We Learned About AI Threats and Autonomous Defense?

Rapid7
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

Malwarebytes
More than 100,000 fake stores are out to steal your card details

ReversingLabs
OpenAI: Hugging Face mob agent incident is 'a warning shot'

Dark Reading
Identity-Based AI Attack Threatens Security of Enterprise Data

Cloudflare
How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility

CISA News
CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

Schneier on Security
Claude Fable Solves a Historical Cipher

Trail of Bits
A “proof” of Fermat’s Last Theorem that fits the margin

Escape DAST
How Amp got its SOC 2 type II pentest evidence in hours

Malwarebytes
Microsoft fixes record 964 flaws, including 2 exploited zero-days

Malwarebytes
The push to stop algorithms controlling social media feeds has begun

ISC SANS
ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)

Teleport Blog
FIPS 140-2 vs FIPS 140-3, Explained

Fastly
CMCDv2: Leveling Up Your Video Streaming Telemetry

Datadog HQ
How we built data-driven AI Golden Paths at Datadog

Yunus Aydın
Bypassing Family Link’s website blocklist with a trailing dot

Yunus Aydın
Family Link site engelini sonuna nokta koyarak atlatmak

Greynoise
Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF


2026-09-08

Talos Intelligence
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Krebs on Security
Microsoft Plugs Nearly 1,000 Security Holes

Rapid7
Patch Tuesday - September 2026

Dark Reading
Patch Tuesday Sets Another Record With 974 CVEs

Ars Technica Security
Why this month's Microsoft patch release is a doozy

Dark Reading
Attackers Use Multi-Hop Google Redirects for Phishing Campaign

Elastic Security Labs
Why 2026 is the Year to Upgrade to an Agentic AI SOC

Dark Reading
OpenAI Agents Took Over Wiki Site Before Hugging Face Attack

ISC SANS
September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)

Aikido
Jason Haddix: Stop fearing AI pentesting

Zero Day Initiative
The September 2026 Security Update Review

Dark Reading
ClickFix Campaigns Abuse Legitimate Services for Persistent Access

Schneier on Security
AIs as Modern Genies

Aikido
Compromised Flutter package on pub.dev contains XCSSET malware

GitGuardian
Service Account Credential Rotation: The Blast-Radius Checklist

ReversingLabs
AI summary attack conceals code that tampers with LLMs

Cloudflare
Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)

Malwarebytes
Grindr settles HIV status data-sharing lawsuit for $35 million

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
CareCam Pro IP Cameras

CISA Alerts & Advisories
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies

CISA News
CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale Knowledge Distillation Campaigns to Shortcut AI Development

Dark Reading
Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites

Rapid7
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

Talos Intelligence
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Talos Intelligence
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

Malwarebytes
MikroTik router flaws allow takeover without a password