207 Security Blogs

Last Updated: 30 Jul 26 23:30 UTC

Blog List | Github | OPML

2026-07-31

Elastic Security Labs
Exploring the Hugging Face Breach: mapping AI agent tactics to Elastic Defend


2026-07-30

Amazon Security
Balancing speed and safety: A control framework for AI coding agents

Dark Reading
Minnesota Water Utility Attacks Expose Sector's Cyber-Risks

Ars Technica Security
Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Eclypsium
The State of Network Infrastructure Security 2026

Dark Reading
AI Harnesses Burst With Potential Exploit Opps

Talos Intelligence
You were onto something with “It’s the Climb,” Miley

Amazon Security
Extend Amazon Inspector SBOM Generator with Plugins

MIT Technology Review
Montana’s plan to become an experimental medical hub just pushed forward

Krebs on Security
Read This Before You Buy That TV Streaming Stick

Wiz
Rethinking Scanning for the AI Era: Wiz’s Agentic Code Security System

Schneier on Security
American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials

Rapid7
KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Malwarebytes
Malwarebytes for Windows, now available on the Microsoft Store 

Embrace The Red
Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)

Microsoft Security
​​​​What’s new in Microsoft Security: July 2026

GitGuardian
What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromise

Dark Reading
Claude Mythos — Hype vs. Reality: What Security Teams Need to Know

Rapid7
Rapid7 named a Leader in the IDC MarketScape: Worldwide MDR Service for Midmarket 2026 Vendor Assessment

Rapid7
Metasploit Framework 6.5 Released

Zero Day Initiative
The July 2026 Apple Security Update Review

Malwarebytes
Hims & Hers sued over alleged health data privacy failures

Kevin Beaumont
Adform compromised to serve crypto stealer via supply chain attack

ToxSec
LLM Router Attacks: No Signature, No Detection, No Reference

Cloudflare
Dogfooding at scale: migrating cdnjs to Cloudflare’s Developer Platform

Malwarebytes
Hidden prompt turns Microsoft Copilot into an AI worm

XPN's Blog
Accelerating EDR Evasion with LLM-Driven Analysis

MIT Technology Review
The Download: tricking LLMs, and reviving geothermal plants

Wiz
CosmosEscape: Taking Over Every Database in Azure Cosmos DB

CISA Alerts & Advisories
Open Source Software: Security Principles and Practices

CISA Alerts & Advisories
MZ Automation GmbH libiec61850

CISA Alerts & Advisories
MikroTik RouterOS

CISA Alerts & Advisories
Schneider Electric IGSS

CISA Alerts & Advisories
Mitsubishi Electric CC-Link IE TSN Communication Protocol

CISA Alerts & Advisories
Toptech Systems RCU II+ and Multiload II+

CISA Alerts & Advisories
Watchfire Controller Software

CISA Alerts & Advisories
NASA Core Flight System (cFS) Health & Safety (HS) Application

CISA Alerts & Advisories
Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module

CISA Alerts & Advisories
CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs

CISA News
CISA Guide Helps Federal Agencies Securely and Effectively Use Open Source Software

CISA Alerts & Advisories
MZ Automation lib60870

CISA Alerts & Advisories
Johnson Controls OpenBlue Employee

CISA Alerts & Advisories
o6 Automation open62541

Schneier on Security
Should You Use AI for a Task? Here’s a Simple Way to Decide

Trail of Bits
Building secure Uniswap v4 hooks

Rapid7
Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

MIT Technology Review
A fundamental flaw leaves LLMs strikingly vulnerable to attack

Talos Intelligence
Black Hat special: Rewind and revisit

Escape DAST
How Escape DAST helped Sigma Computing achieve complete GraphQL API endpoint coverage

Eye Security
Identity, at AI Speed: What 279 BEC Cases Reveal About GenAI Attacks

Resecurity
When AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents

ISC SANS
ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th)

Auth0
Token Vault Privileged Worker: Secure Access for Agents That Never Sleep

Dark Reading
SE Asian Cybercriminal Syndicates Become a Global Power

ISC SANS
Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th)

Dark Reading
'Flying Eagle' Full-Service Mobile RAT Builder Wings Across China

Fastly
Teaching Coding Agents to Check Their VCL with Fastly Fiddle

Auth0
Agent as Principal: A Purpose-Built Identity for Agents

Snyk
Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code


2026-07-29

XPN's Blog
Disposable Tooling - Building LLM-Generated Mythic Agents from Prompt to Deployment

Malwarebytes
Apple accused of letting fake crypto app steal $1.8 million

Ars Technica Security
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission

Aikido
Four incident-response decisions from the Hugging Face breach

Amazon Security
Amazon identifies North Korean hacker group behind open-source supply chain attacks

Dark Reading
OpenAI's Rogue Model Claims More Victims Beyond Hugging Face

Dark Reading
Red Agents vs. Blue Agents: How to Make AI Better at Defense

XPN's Blog
Prompt Engineering for Security Agents - A Measurable Approach with GEPA

MIT Technology Review
How an overlooked geothermal plant got a second chance

Jericho
Drowning in EULA, T&S, and Privacy Policy Updates

Dark Reading
Who's Liable When AI Agents Escape? Hugging Face Breach Raises Hard Questions

Dark Reading
Hugging Face Hack: Lessons for Cyber Defenders

Schneier on Security
Measuring the Tendency of AI Agents to Go Rogue

Dark Reading
When AppSec Scanners Become a Supply Chain Attack Vector

Malwarebytes
Buying TikTok views or followers? Here’s what you’re really getting

Xint
Everyone Can Find Vulnerabilities Now. Here Is How To Tell Them Apart.

Rapid7
CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

Microsoft Security
​​Better security starts with better questions

Github Security Blog
Tame Dependabot: Group your updates, slow the cadence, keep security fast

Ars Technica Security
Anthropic is finding bugs faster than Microsoft can fix them

GitGuardian
An AI Agent Breached Hugging Face. The Attack Playbook Was Older Than the Attacker

Step Security
Dev Machine Guard Now Inventories AI Agent Skills on Developer Machines

Malwarebytes
AI robocalls: Why caller ID is still lying to you

Amazon Security
Secure your npm and pip package updates in Amazon Linux

Dark Reading
Patch-Resistant 'RufRoot' Flaw Can Unleash Malicious AI Agent Swarms

Malwarebytes
OpenAI explains how its AI agent breached Hugging Face

Wiz
Wiz’s First 6 Months as Part of Google

Black Hills Info Sec
Report As You Go: Maintaining Good Documentation for SOC Analysts

Aikido
Top SAST tools 2026

Searchlight Cyber
July 28th – This Week’s Top Cybersecurity and Dark Web Stories

Cloudflare
Post-quantum authentication to origins is now supported

Rapid7
How AI is Rewriting the Zero-Day Playbook for Preemptive Security

Wiz
The Wiz Red Agent is Now Generally Available

MIT Technology Review
The Download: a chip talent battle, and deflating AI hype

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA News
CISA and Partners Unveil Updated Software Bill of Materials Resource That Improves Transparency, Security and Risk-Informed Decision Making

CISA Alerts & Advisories
2026 Minimum Elements for a Software Bill of Materials (SBOM)

Schneier on Security
Long-Lived Vulnerability in Microsoft Secure Boot

Malwarebytes
We found 120 fake Walmart stores trying to steal your credit card

MIT Technology Review
The AI Hype Index: Unsexy AI

ISC SANS
Apple Patches Everything (July 2026), (Wed, Jul 29th)

Step Security
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan

Snyk
Stadium Summer: The Snyk Connect Fan Zone Tour

ISC SANS
ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)

Schneier on Security
Measuring LLMs’ Ability to Perform Cryptanalysis

Datadog HQ
A practical guide to React error monitoring

Elastic Security Labs
Stop rewriting detection rules by hand: automatic Sentinel-to-Elastic migration is here


2026-07-28

Step Security
2026 Mid-Year Update: On Pace for Our Biggest Year Yet

Ars Technica Security
We now have a better understanding how OpenAI hacked into Hugging Face

Dark Reading
Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

Dark Reading
Thousands of Data Center Controllers Open to Takeover

Dark Reading
When AI Agents Escape Sandboxes, Old Security Rules Apply

Socket
Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers

Dark Reading
Stronger AI Safety Requires Peeking Inside the 'Black Box'

Palo Alto Networks
Palo Alto Networks Achieves Global CBPR and PRP Certifications

Amazon Security
AWS KMS or AWS CloudHSM: Choose the right key management solution

Rapid7
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)

The Citizen Lab
Co-Founder of Controversial Spyware Firm Had Israeli Diplomatic Passport

Amazon Security
2026 Phase 1a IRAP report is now available on AWS Artifact for Australian customers

Dark Reading
'Certighost' Flaw Haunts Microsoft Active Directory Certificates

Github Security Blog
Disrupting supply chain attacks on npm and GitHub Actions

Wiz
The risk hiding behind exposed MCP servers

Xint
Findings Management to Combat Report Overload

Socket
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan

ToxSec
Ignore Previous Instructions: From Meme to CVSS 9.3 [Special Guest Post]

Mend
Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update

GitGuardian
How to Reduce Time to Revoke for Exposed Credentials

Cloudflare
Natural disasters and government interference: examining Q2 2026’s major Internet disruption events

Rapid7
The Next Evolution of MDR: Preemptive Defense and Agentic Investigation

Rapid7
Rapid7 Cyber GRC is now available: Turn security action into compliance proof

Malwarebytes
We rebuilt Malwarebytes Mobile Security for the scams of today 

Malwarebytes
Shared Claude chats were searchable on Google

Dark Reading
Former Citigroup CISO Blauner on What Makes A Great Security Leader

MIT Technology Review
The Download: OpenAI’s predictable hack, and an AI stock sell-off

Eye Security Research
AI-powered Phishing-as-a-Service: Inside Two BEC Kits

CISA Alerts & Advisories
CI Fortify – Advice for isolating vital systems

CISA Alerts & Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

CISA Alerts & Advisories
ABB KNX Update Tool

CISA Alerts & Advisories
igloohome Smart Lock Mobile Application

CISA Alerts & Advisories
MikroTik RouterOS and Cloud Hosted Router

CISA News
CISA Joins Australia and Others to Publish Guidance to Isolate Operational Technology and Enabling Systems in Critical Infrastructure

CISA Alerts & Advisories
Siemens Mendix Runtime

CISA Alerts & Advisories
Siemens Desigo CC

CISA Alerts & Advisories
Siemens SIMATIC S7-PLCSIM Advanced

Malwarebytes
Update your iPhone, iPad and Mac to fix Apple security holes

Malwarebytes
Vatican’s Click To Pray app exposed personal data from 700,000 users

Schneier on Security
Axon Is Another License Plate Surveillance Company

Wiz
Accelerating CISA BOD 26-04 Vulnerability and Triage Activities through Wiz

Trail of Bits
How we use /goal to find bugs in Patch the Planet

Talos Intelligence
IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

MIT Technology Review
Samsung’s chip workers are jumping ship to rival SK Hynix

Eye Security
Shadow AI and EU Sovereignty: The AI That Is Already in the Room

Rapid7
Rapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer success

ISC SANS
AutoIT Payload Injector , (Tue, Jul 28th)

TrustedSec
AI Directives and AI Strategy Development

ISC SANS
ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)

Dark Reading
AI Agent Drives Espionage Attack on Thai Ministry of Finance

Snyk
The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security

Rosecurify
Seclog - #188

Adepts of 0xCC
From your doorbell to your home network

Datadog HQ
Engineering the Datadog Agent for FedRAMP High® Certification

Datadog HQ
Investigate every security event with an AI agent, without the frontier bill


2026-07-27

Socket
Socket Releases Free Certified Patches for Nuxt Security Vulnerabilities

Jericho
Research: Hacking-adjacent Incident from 1966

Ars Technica Security
Microsoft unveils AI security tools it says outperform competing platforms

Dark Reading
Agentic Browsers Rewind Web Security by 20 Years

Dark Reading
'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure

Dark Reading
FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown

Amazon Security
AWS Shield Advanced is embracing the AWS WAF Anti-DDoS managed rule group: What changes and how to prepare

Malwarebytes
Aftercall ads are driving Android users crazy

Dark Reading
Why Resetting Passwords No Longer Stops Attackers

MIT Technology Review
OpenAI called the Hugging Face attack unprecedented. But we’ve been here before.

Dark Reading
Adversaries Don't Need a Zero-Day — They Read Your Rulebook

Artem Golubin
Writing arenas in Rust from scratch

Microsoft Security
Rethinking security for the age of AI

Microsoft Security
Enhancing AI security through global AI red teaming

Amazon Security
Announcing the Cloud Security Alliance on AWS Compliance Guide

Ars Technica Security
Activist charged with felony after giving border agent "duress code" that wiped his phone

Exodus Blog
From Virtual Share to Physical Shell: Leveraging Windows’ Inconsistent Access Control for LPE

Malwarebytes
Sextortion scammers are exploiting ShinyHunters data leaks

Malwarebytes
What’s your data worth on the dark web? (Lock and Code S07E15)

MIT Technology Review
How lasers could help provide fuel for nuclear reactors

Wiz
Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym

Cloudflare
We’re open-sourcing our privacy proxy CLI

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Schneier on Security
Cognyte Sells a Mobile Cell Surveillance Van

ISC SANS
Java Spring Boot "heapdump" scans, (Mon, Jul 27th)

Malwarebytes
A week in security (July 20 – July 26)

Socket
The AI Industry Is Betting on Open Weights

ISC SANS
ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th)

Elastic Security Labs
Inside Elastic InfoSec's agentic SOC: How we cut AI agent LLM calls by 60%

Star Labs
When AI Makes 0-Days Feel Like N-Days

Fastly
Automated Payments at the Edge with x402 and Fastly Compute

Auth0
The Self-Service Roadmap: Navigating the Auth0 Dashboard Subscriptions Tab

Datadog HQ
Normalize security logs to Google SecOps UDM with Observability Pipelines

Snyk
What Is AI Pentesting and How Does It Work?


2026-07-26

ISC SANS
Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)

ToxSec
Hacking Hugging Face to Cheat a Benchmark

Filippo Valsorda
Production ML-DSA Verification in 350 Lines of Python

Troy Hunt
Weekly Update 514: This Week in Data Breaches

Ali Yazdani
The Part Everyone Misses in Supply Chain Vulnerability and SBOM Management


2026-07-25

XPN's Blog
Jailbreaking Local Models with JSON

Step Security
Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials

Joshua Rogers
33 Vulnerabilities in cJSON


2026-07-24

Dark Reading
CISOs vs. Boards: Myth or Misunderstanding?

Schneier on Security
Friday Squid Blogging: Illex Squid Catch in the Falklands

Amazon Security
Accelerating AWS Network Firewall troubleshooting with AWS DevOps Agent

Dark Reading
Escape Artists: 'Incorrigible' AI Models Resist Rehabilitation

Aikido
Top LLM security tools to protect AI applications

Cloudflare
BGP ORIGIN attribute manipulation and its impact on the Internet

GitGuardian
Why SAST and DAST Aren't Enough for Secrets Security

Malwarebytes
Don’t get fooled by TikTok resin art scams

Socket
Fake Corepack Site Distributes Infostealer and Proxyware to Developers

Malwarebytes
Call of Duty Mobile scam uses fake free points to steal player accounts

Malwarebytes
OpenAI’s agent escaped its sandbox during a security test

The Citizen Lab
How Iran Uses Cellular Infrastructure to Target US Military Phones

Auth0
Agentic Loops and Agent Graphs: Security Risks You Need to Know

Aikido
Top Acunetix alternatives for automated vulnerability scanning

Malwarebytes
Google wants to store a selfie video of your face

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 30

Dark Reading
Vatican's Official Prayer App Leaks 700K+ Global Users' PII

Dark Reading
Default Azure Automation Setting Enables Cross-Tenant Identity Takeover

SentinelOne
Your Best Analyst Shouldn’t Be a Person. It Should Be a Capability Everyone Can Summon.

Escape DAST
Why does the rise of Agentic AI force security teams to become research-aware?

Schneier on Security
Why AI Needs a “Genie Coefficient”

Escape DAST
AI pentesting, Mission log: July

Dark Reading
Europe's Multilingual Reality Exposes AI Security Gaps

TrustedSec
CCPA Update: Cybersecurity Requirements (Part 2)

Moonlock
ClickLock Stealer abuses macOS password prompts

Moonlock
New CrashStealer malware pretends to be Apple’s Crash Reporter

ISC SANS
ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)

Elastic Security Labs
Inside Elastic InfoSec's agentic SOC: When to inline your agent's skills for a 5× cost reduction

Teleport Blog
VPN Alternative for Internal Web Apps | Teleport