219 Security Blogs

Last Updated: 30 Sep 26 18:30 UTC

Blog List | Github | OPML

2026-09-30

Step Security
Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes

White Knight Labs
Automating AI Hacking with Tree of Attack

Wiz
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts

Malwarebytes
Hackers steal protective order and foster care records from Arizona courts

Rapid7
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Varonis
Varonis and Cohesity: Improving Cyber Resilience with Data Security

Dark Reading
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net

GitGuardian
AI Agent Authorization Beyond Authentication: A Look At AWS Dogwood

ReversingLabs
Restrospective: How Malicious Updates Poison Your Environment

Rapid7
Higher education is under siege, and fragmented security is making it harder to respond

Microsoft Security
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

Cloudflare
Cloudflare Impact reaches $100 million in donations

Cloudflare
Identify AI model overuse with User Insights

Cloudflare
Monetization Gateway beta: charge AI agents for consumption with HTTP 402

Cloudflare
Pay Per Use: when AI uses your work, you should get paid

Cloudflare
Simplifying domains for people and agents

Cloudflare
Detect and send production issues straight to your agent

Cloudflare
Cut your AI spend with AI Gateway's Auto Router

Cloudflare
The Internet has a second audience

Cloudflare
Cloudflare Containers, rebuilt to scale agent sandboxes

MIT Technology Review
The Download: OpenAI’s chief research officer explains its hacking response

Malwarebytes
Your car’s app could be telling Big Tech who you are and where you go

Ars Technica Security
Cloudflare plans to issue quantum-safe TLS certificates

Schneier on Security
I Want Better Reporting on AI Genie Behavior

MIT Technology Review
“We’re not going to shoot ourselves in the foot” over hack fallout, says OpenAI’s chief research officer

Talos Intelligence
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

Dark Reading
South Africa Seeks Help After Cyberattack Targets Air Traffic Control

DarkRelay
Shadow Credentials: Take Over AD Accounts with msDS-KeyCredentialLink

Snyk
What Is Agentic AppSec?

Snyk
Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control

Moonlock
The Upwork scams nobody talks about until it’s too late

ISC SANS
ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)

Datadog HQ
How we built an async-aware Python profiler

Auth0
Seven Architectural Readiness Checks Before Production Launch


2026-09-29

Microsoft Security
Phishing Abuses RMM Tools for Persistent Access

Dark Reading
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks

Dark Reading
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution

Dark Reading
Cloudflare Announces Public Certificate Authority for the Post-Quantum Web

Microsoft Security
​​Beyond source code: A path to the keys to the kingdom

Socket
upm Launches as a Fast, Tiny Package Manager Written in TypeScript

Dark Reading
'NeedyMantis' Provides Long-Term Access to Compromised Networks

GitGuardian
Generative AI Security: Are Your Developers Pasting Secrets Into LLMs?

ReversingLabs
Can advanced math make AI systems safer?

Microsoft Security
Star Blizzard refines phishing and malware delivery with the RedFlick technique

Dark Reading
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

watchTowr Labs
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

ToxSec
AI-Powered Phishing: Why Traditional Email Security Is No Longer Enough [Guest Post]

ISC SANS
Scans for Wordfence Protected Websites, (Tue, Sep 29th)

Cloudflare
Building a post-quantum certificate authority with Merkle Tree Certificates

Cloudflare
Preventing quantum downgrade attacks against IPsec

Cloudflare
Enforce positive security with Cloudflare Application Profiles

Cloudflare
Is your domain using post-quantum encryption? Now you can see for yourself

Cloudflare
Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account

Cloudflare
We tested our own WAF with frontier AI models. Here’s what we found

Cloudflare
Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks

Cloudflare
Building a certificate authority for the whole Internet

Cloudflare
Using AI to chart a course for our post-quantum migration

Bishop Fox Security
Zilliz / Attu | 2.6.5

Malwarebytes
Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home

Wiz
The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub

MIT Technology Review
The Download: climate tech companies to watch and AI’s discovery problem

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts & Advisories
Toptech TMS7 and TopHAT

CISA Alerts & Advisories
Lantronix G520 Series Cellular Gateway

CISA Alerts & Advisories
Baicells Nova 430H

CISA Alerts & Advisories
MikroTik RouterOS

CISA Alerts & Advisories
VIVOTEK Camera Firmware

CISA Alerts & Advisories
Anjvision YSSD-RTMP-H5

CISA Alerts & Advisories
Viidure Dashcam Android Application

Schneier on Security
Using Device Linking to Eavesdrop on WhatsApp and Signal

MIT Technology Review
Coming soon: Our 2026 list of Climate Tech Companies to Watch

MIT Technology Review
Making AI an asset, not an expense

Malwarebytes
Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

Talos Intelligence
Securing the keys to the kingdom: Announcing Executive Threat Detection

Malwarebytes
Fake iPhone Duo preorder scam triggers DarkSword attack

Malwarebytes
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests

Shielder Blog
louis-rs Security Audit

Palo Alto Networks
Why OT Resilience Is Now a Boardroom Imperative

Voidstar Security Research Blog
A Hacker's Guide to ARM Tracing - ETM, ITM, and the TPIU

ISC SANS
ISC Stormcast For Tuesday, September 29th, 2026 https://isc.sans.edu/podcastdetail/10114, (Tue, Sep 29th)

Semgrep
Claude Opus 5.5 Writes Working Code but Only Half of It Is Secure

Elastic Security Labs
No MDM for Linux? A 68-line Elastic workflow keeps every endpoint's config current

Fastly
Fastly Unveils AEDA: Autonomous Edge Security in Gemini Enterprise

Rosecurify
Seclog - #197

Auth0
Introducing IdentiFlows.dev: A Visual Reference for Identity Flows

Auth0
Integrating Claude Code with Auth0 APIs


2026-09-28

ISC SANS
Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)

MIT Technology Review
Roundtables: The Deadly Failures of The Virtual Border Wall

Dark Reading
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities

Dark Reading
One Packet Can Crash OT Servers in Industrial Sectors

Dark Reading
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

Github Security Blog
How we found 24 Android vulnerabilities using our open source AI security agent

Dark Reading
AI Agents Are Privileged Users; Who Is Auditing Their Access?

XBOW
No Time to Pwn: CVE-2026-72018

Amazon Security
AWS European Sovereign Cloud: Demonstrating an independent operation

MIT Technology Review
When can we say AI made a scientific discovery?

Offensive Security
CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API

Dark Reading
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions

Eclypsium
Safe AI Agents Start With Trusted AI Infrastructure

Cloudflare
Introducing cf: the agentic CLI for the entire Cloudflare API

Aikido
Aikido funds Node.js security

Dark Reading
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack

Krebs on Security
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

Microsoft Security
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Cloudflare
Next.js applications, powered by Vite: introducing Vinext 1.0

Malwarebytes
OpenAI pauses work on top AI models after agent slips past internet controls

Wiz
Introducing the Wiz Partner Alliance Managed Service Provider Program

MIT Technology Review
The Download: rogue agent liability and the AI Hype Index

GitGuardian
GitHub Copilot Security and Privacy Concerns: Understanding the Risks and Best Practices

Schneier on Security
New Attack Against RSA

Moonlock
9 tricks behind every Bumble scam that can start with a single photo

watchTowr Labs
Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

Rapid7
Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Malwarebytes
FBI agents’ blood tests and doctors’ notes surface after breach

Palo Alto Networks
Securing AI Agents at Scale with NVIDIA

MIT Technology Review
Who’s liable when AI agents go rogue?

Troy Hunt
Weekly Update 523: Live From a Norwegian Fjord

Malwarebytes
A week in security (September 21 – September 27)

Moonlock
How to hide orders on Amazon: What still works

ISC SANS
ISC Stormcast For Monday, September 28th, 2026 https://isc.sans.edu/podcastdetail/10112, (Mon, Sep 28th)

Moonlock
Is your Messenger hacked? Here’s how to tell and what to do

Auth0
Auth0 for ChatGPT - Build and Manage Identity by Just Asking

Auth0
Securing Agentic Commerce Using Auth0 and the Universal Commerce Protocol (UCP)

Fastly
Fastly's 2025 Sustainability Report: Running the Decarbonization Marathon

Greynoise
Swarming Against Citrix 0-Day Exploitation

Elastic Security Labs
Quarantined isn't contained: Agentic phishing response with Elastic and Sublime


2026-09-27

ISC SANS
Wireshark 4.6.9 Released, (Sun, Sep 27th)

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Zero Salarium
EDR Evasion: Process Injection Without WriteProcessMemory

Paultendo
Lookalike letters don’t fool GPT-6 or Claude, but nearly quadruple the bill


2026-09-26

DarkRelay
HTTP and HTTPS Enumeration for Pentesting (80, 443)

shubs
do we still enjoy software engineering in the age of AI?


2026-09-25

Krebs on Security
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

Schneier on Security
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee

Socket
Socket Joins New OpenJS Program to Fund Node.js Security Work

Dark Reading
Why the CISO-CFO Relationship Is a Key to Cybersecurity Success

Ars Technica Security
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?

Dark Reading
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

Varonis
AI Security Fundamentals: The Real Industry Shift Taking Place

Dark Reading
What We Missed: Google Gemini Joins the AI Escape Party

Microsoft Security
Storm-3168: Agentic-driven cloud attacks using compromised service principals

Malwarebytes
LinkedIn adds new checks for fake profiles and work histories

Eye Security Research
Rise of the Jev-Clones

GitGuardian
AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP

Malwarebytes
Kothamine malware uses Tailscale’s tailcat to evade network detection 

Wiz
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments

Dark Reading
Stopping IT Worker Scams Requires Revamped HR Process

Rapid7
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

Silverfort
Silverfort integrates with Anthropic to turn Claude activity into identity context

Bishop Fox Security
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326

ISC SANS
A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)

Malwarebytes
Criminals turn placeholder domain into ClickFix trap

MIT Technology Review
The Download: the Pentagon’s AI-powered lie detector and young organ limits

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Schneier on Security
On Anthropic’s AI Misuse Report

Trail of Bits
Don't let TEEs break your MPC

Malwarebytes
That shipping rebate offer may come with a monthly charge

Dark Reading
Russia's Hybrid Cyber-Physical War in Europe Heats Up

ISC SANS
ISC Stormcast For Friday, September 25th, 2026 https://isc.sans.edu/podcastdetail/10110, (Fri, Sep 25th)

Moonlock
Fake Zoom and Slack downloads are spreading the new Sonoma stealer

Moonlock
Is CCSPayment a scam or legit? What CCS Offices notices really mean

Semgrep
What Application Security Actually Does All Day

Datadog HQ
Extend Datadog RUM and Product Analytics to Shopify and Salesforce

Auth0
Stop Building MFA from Scratch (And What to Do Instead)

Teleport Blog
How to Eliminate Shared Production Kubeconfigs


2026-09-24

Socket
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud

Dark Reading
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

Dark Reading
SectopRAT Returns, Hiding Inside a Legitimate Application

Aikido
Top CodeQL alternatives in 2026

Github Security Blog
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

Red Siege InfoSec Blog
Red Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect

Talos Intelligence
Trust and the enticing consultancy offer

Wiz
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026

Microsoft Security
​​​​​​​​What’s new in Microsoft Security: September 2026​​

Microsoft Security
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Silverfort
Replicating part of the OpenAI attack on Hugging Face

GitGuardian
How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding

Dark Reading
3 Cyber Threats That Defined the Summer of 2026

Dark Reading
How to Build a SASE Framework for Modern Cybersecurity

Dark Reading
Ghost Service Accounts Enable M365 Data Theft in Chile

Malwarebytes
OpenAI agent breached Australian government site, took months to report it

Wiz
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure

Dark Reading
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

Rapid7
When Business Email Compromise Starts Rewriting Reality

Bishop Fox Security
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications

Malwarebytes
New Browser Guard features add protection before and after you click

CISA Alerts & Advisories
Botslab G980H Dashcams

XBOW
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale

CISA Alerts & Advisories
Siemens Mendix Runtime (Update A)

CISA Alerts & Advisories
Eufy Omni C20, Omni X10 Pro

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Ars Technica Security
There's a new way to break RSA that's faster than anything we've seen before

Schneier on Security
Malicious npm Packages That Evade Defenses

Malwarebytes
Update Chrome: 108 security fixes for desktop, new release for Android

Ali Yazdani
The Security Engineer's Survival Kit for the AI Era

Malwarebytes
Google’s location data privacy failures draw a €403 million fine

ISC SANS
One URL, Three Different Tricks, (Thu, Sep 24th)

TrustedSec
What's New in hate_crack Since 2.0

Snyk
Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface

ISC SANS
ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th)

Moonlock
Guests, hosts, and the Airbnb scams that target both

Project Black
Bypassing EDR with Local AI

Project Black
Bypassing EDR with Local AI

Semgrep
Introducing Malware Detection and Response Automation

Datadog HQ
Using TypeSafe’s Jev for evals in Datadog Agent Observability

Paultendo
Testing RaySpace against the letters we already know

Paultendo
tothepenny: bank statements that have to add up

Star Labs
How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail

Star Labs
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE

Accomplish
Escaping the Cloudflare sandbox

Meta Security
Bringing Private Processing to Meta AI Glasses

Infernux Blog
Major data lake changes in Microsoft Sentinel September 2026 Update


2026-09-23

watchTowr Labs
Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

Amazon Security
ICYMI: August 2026 @AWS Security

Dark Reading
SASE Converges Network & Security Into One Cloud Solution

Doyensec
One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts

Ars Technica Security
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real

Socket
Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts

Dark Reading
EDR Evasion Stack Helps Process Injection Slip Past Defenses

Dark Reading
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

XPN's Blog
Experimenting with Jev for Offensive Security

Zero Day Initiative
CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer

Malwarebytes
How device code phishing gives scammers access to your account