2026-10-18
2026-10-17
2026-10-16
Schneier on Security
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Ars Technica Security
OpenAI models hacked a crypto wallet and breached more websites
Dark Reading
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Filippo Valsorda
The NIST Elliptic Curves Seeds Bounty Has Been Claimed
Dark Reading
AI Takes Control of Robotic Arm in 16 Minutes Flat
Artem Golubin
The future of the internet could be paywalls
MIT Technology Review
Roundtables: A Conversation With the Creator of AI-Designed Viruses
Microsoft Security
Managing open-weight model risk in enterprise deployments
The Citizen Lab
The Lawful Access Act’s threats to Canada’s national security
Cloudflare
Continuous accountability for Verified bots
MIT Technology Review
The Download: failed social media bans, and extending pets’ lives
CISA Alerts & Advisories
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Alerts & Advisories
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
Schneier on Security
Backdooring Open-Weight AI Models
Malwarebytes
OpenAI sued over children safety and data use
MIT Technology Review
This implant can restore sight for patients with macular degeneration
MIT Technology Review
Love is infrastructure
MIT Technology Review
Can’t bear to say goodbye to your pet? Biotech’s got you covered.
MIT Technology Review
Kids are outsmarting social media bans. That’s not a problem we need to solve.
Joshua Rogers
RCE (kind of) in Transmission BitTorrent’s daemon
2026-10-15
Ars Technica Security
Targeted ads delivered 0-click exploits to install mercenary malware
Artem Golubin
Python's binary wheels and supply chain attacks
Varonis
Varonis is joining Proofpoint
Meta Security
How Meta Built Forum With AI-Native Engineering
Black Lantern Security
IIS Shortname Enumeration in the Big ‘26
Talos Intelligence
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Google Safety & Security
Check if a text message is a scam using Circle to Search.
Cloudflare
A fully programmable secure web gateway
Schneier on Security
Measuring Human Cryptanalysis Effort
Amazon Security
AWS Security Agent (now part of AWS Continuum) exploited 33 of 37 new real-world CVEs
Meta Security
Sapienz Receives ISSTA 2026 Impact Paper Award
Cloudflare
Deploy with Void
Bishop Fox Security
AI Security Scoping: Define What To Test In Your Deployment
MIT Technology Review
The Download: reviving frozen pig kidneys and boosting nuclear power
CISA Alerts & Advisories
Eclipse Foundation Eclipse Milo
CISA Alerts & Advisories
CISA Malcolm
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
Guangzhou Juan IoT Technology EseeCloud
CISA Alerts & Advisories
Thermo Fisher Torrent Suite Software
CISA Alerts & Advisories
J4Care dcm4che
Eye Security Research
Cooldown or compromise: the three-day rule for npm and PyPI
MIT Technology Review
How much more can nuclear power plants give?
MIT Technology Review
Six wild ideas for perpetuating your mind
MIT Technology Review
Pig kidneys that were “frozen” for a year have been brought back to life
Sansec Threat Research
BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)
Star Labs
YuanKong RAT: the Android remote-control service that stamps its operators' names into every build
2026-10-14
Black Hills Info Sec
The Threat Hunting Flywheel: Why Threat Hunting Isn’t About Finding Bad Things
Ars Technica Security
Fridge hack costing millions and sparking fires stemmed from poor security
Amazon Security
Penetration testing every deployment with AWS Continuum
Black Lantern Security
CVE-2026-79957 Insecure Direct Object Reference in ServiceNext
Schneier on Security
Upcoming Speaking Engagements
Schneier on Security
The Future of AI Cryptanalysis
Krebs on Security
U.K. Sanctions Cryptomus for RU Money Laundering
Schneier on Security
Cyberattack on Connected Fridges in France
Talos Intelligence
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
core-jmp
HDD Firmware Hacking Part 1
Bishop Fox Security
Behind Closed Doors: How Physical Penetration Testing Secures Sensitive Conversations
Microsoft Security
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
GitGuardian
Why We Built the Good Samaritan Program
Ars Technica Security
Anthropic warns small AI models could self-replicate through IoT devices
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Trail of Bits
Package managers have an integrity problem
Scott Helme
Passkeys Are Not a Trap
Palo Alto Networks
The Blind Spot in Orbit: Why Space Could Be the Next Infrastructure Crisis
2026-10-13
Krebs on Security
Microsoft Patches More Than 1,400 Security Flaws
Rapid7
Patch Tuesday - October 2026
Dark Reading
North Korea Phishes Ukrainians for War Intel
Amazon Security
Part 2 – Cybersecurity journeys: What even is this job?
Talos Intelligence
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Dark Reading
Anthropic Finds Ingredients for Future AI Worms
Leviathan Security
October 2026 Mobile Platform Security & Fraud Prevention Assessment
Zero Day Initiative
The October 2026 Security Update Review
Google Safety & Security
Developing Gemini 4 Argon responsibly and safely
Github Security Blog
GitHub’s model for secret detection: Finding more secrets with less noise
Meta Security
Meta’s Generative Ads Model (GEM): Scaling the Central Model and Compute Engine for Frontier Ads AI
Silverfort
5 cybersecurity assumptions AI attacks break
Bishop Fox Security
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CISA Alerts & Advisories
Swann Communications SWIFI-SE2KIC
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Inductive Automation Ignition Software
CISA Alerts & Advisories
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
Shielder Blog
Power Grid Model Security Audit
CrankySec
Still Shit!
Fastly
AI Bot Cosplay
2026-10-12
Amazon Security
GuardDuty Extended Threat Detection has added five new indicators to surface attack sequences
Meta Security
OCP Summit 2026: Powering AI with Open Innovations in Scale-Up, Scale-Out, and Scale-Across Networks
Amazon Security
Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM
Schneier on Security
FBI Arrests Suspect in FBI-Hacking Case
Filippo Valsorda
(Post-Quantum) Cryptographic Right Answers
Malwarebytes
Phishing emails are baiting your AI assistant
Malwarebytes
A week in security (October 5 – October 11)
Rosecurify
Seclog - #199
MaskRay's Blog
Who pays for Clang
Elastic Security Labs
Auditing the auditor: Unmasking Apex Accelerator