215 Security Blogs

Last Updated: 21 Aug 26 21:16 UTC

Blog List | Github | OPML

2026-08-21

Schneier on Security
Friday Squid Blogging: Neon Flying Squid

Socket
PHP and Composer Support Is Now in Beta

Dark Reading
OWASP Flags Top AI Skill Risks in New Security Blueprint

Schneier on Security
AI Is Learning to Write Genetic Code

Malwarebytes
Zombie Card: An expired Visa credit card can be used for purchases

Dark Reading
Calling on Cyber Pros to Help Defend City Hall

Scott Helme
Introducing dbsc.dev: Does Your Browser Support DBSC?

Dark Reading
OpenAI Adds Controls That Should've Been There Already

ToxSec
CoT Forgery: Prompt Injection on the Model’s Own Thoughts

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 34

Bishop Fox Security
No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452

core-jmp
BOFScale: A CDN-Fronted Tailnet from a BOF-PE

MIT Technology Review
The Download: threats from space mirrors and credit for AI drugs

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Malwarebytes
Medical records, SSNs, and bank details exposed in CareCloud data breach

Schneier on Security
More Incidents of AIs Going Rogue in Cybersecurity Challenges

Aikido
We burned 11.7bn tokens to find the best cyber AI model

Escape DAST
Escape found the same XSS in two AI chatboxes. The vulnerability was in the Markdown renderer.

MIT Technology Review
Mother tongue

MIT Technology Review
This company’s plans to deploy space mirrors could jeopardize the night sky for many

MIT Technology Review
When AI designs a drug, who gets the credit?

Hunt and Hackett
On COM/WinRT initialization, apartments, and lpacCom capability bypasses, Part 2

Moonlock
Is iCloud Private Relay leaking your IP address? A lawsuit claims it is.

Moonlock
Apple’s anti-tracking prompt will change in the EU. Here’s why.

Moonlock
New Mac malware AmnesiaStealer hijacks Chromium browsers

ISC SANS
Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st)

ISC SANS
ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)

ISC SANS
Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)

Datadog HQ
Control trace volume with OpenTelemetry tail-based sampling


2026-08-20

Socket
Socket Now Protects the Firefox Extension Ecosystem

Dark Reading
New CUSTODY Framework Constrains AI Agents Inside the Network

Dark Reading
What We Missed: Delta Flight Disrupted With Wi-Fi Hack

Step Security
Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper

Amazon Security
AWS Network Firewall now supports rule hit count

Talos Intelligence
Is Cyber missing the Marque?

The Citizen Lab
‘Unprecedented’ Number of Apple Users Received Recent Spyware Alert

Schneier on Security
Detailed Timeline of OpenAI’s Cyberattack on Hugging Face

Dark Reading
N-able Bug Exposes Password Vault Master Keys

Dark Reading
Money and Mindset: The Two Biggest Roadblocks to Cyber Policing

Cloudflare
From all-or-nothing to task-based OAuth consent

Offensive Security
Who Secures AI When It Touches Every Security Team?

Wiz
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

Socket
Popular Rust Crates Compromised in Build-Time Supply Chain Attack

MIT Technology Review
Debates over AI consciousness are a trap

Dark Reading
Pakistan's Transparent Tribe Refreshes Toolset for Afghan Cyberattacks

Malwarebytes
ChatGPT for Teens tackles risky chats and homework shortcuts

Escape DAST
Horizon3.ai alternatives in 2026: Escape vs NodeZero and 4 more tools

GitGuardian
Machine-Speed Credential Abuse: What the ChainDrop npm Worm Changes

Dark Reading
'Grandoreiro' Malware Resurfaces With Mexico Campaign

Malwarebytes
Twitch wants your content for Amazon AI training. Here’s how to opt out

ISC SANS
Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th)

Ars Technica Security
Grok exfiltrates user data when malicious instructions are encrypted

Bishop Fox Security
CTEM 101: Moving From Spreadsheets to Continuous Risk Reduction

ISC SANS
Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses, (Thu, Aug 20th)

Malwarebytes
Your Mac already has a built-in firewall. Here’s how to get more from it 

MIT Technology Review
The Download: polycrisis support networks and a hydrogen gold rush

CISA News
CISA Releases Foundational, Flexible Guidance to Help Federal Agencies Implement Effective Logging, Visibility and Operational Standards

XBOW
Vulnerability Management Automation: How to Prioritize and Remediate at Scale

CISA Alerts & Advisories
Johnson Controls Simplex Incident Manager

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Malwarebytes
9 million images of people’s faces exposed by reverse lookup service

Aikido
Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack

Escape DAST
Introducing Escape's Channel Partners

Talos Intelligence
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities

Talos Intelligence
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations

MIT Technology Review
The next big thing in hydrogen could be underground

Schneier on Security
Police Are Hiding Their Use of Flock Surveillance Cameras

MIT Technology Review
Unlocking hidden revenue streams with market models

MIT Technology Review
Support networks aim to help kids through the polycrisis

ISC SANS
ISC Stormcast For Thursday, August 20th, 2026 https://isc.sans.edu/podcastdetail/10060, (Thu, Aug 20th)

Aikido
AI pentesting evaluation checklist: What to look for in an AI pentesting vendor

Auth0
Enterprise Readiness Is Not What You Support. It Is What Your Customers Can Own

Auth0
Enterprise-Managed Authorization for your MCP server: Setting Up and Testing XAA in Auth0

Datadog HQ
From signals to systemic risk: Building Risk AI

Datadog HQ
Detect vulnerabilities in LLM applications with Datadog’s AI-native SAST


2026-08-19

Dark Reading
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns

Dark Reading
Agentic AI Presents New Insider Threat Model for Orgs

Malwarebytes
41 deceptive download sites show a real link, then send you somewhere else

Socket
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft

Amazon Security
Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

Dark Reading
SilkParasite Threatens Central Asian Orgs With Flurry of RATs

Rapid7
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Cloudflare
A revisit of remote Spectre attacks on Cloudflare Workers

Wiz
Wiz Penetration Test Findings is now GA

Malwarebytes
Sideloading on Android: What it is, why it’s risky, and how to do it more safely

ISC SANS
Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)

Escape DAST
Escape vs Pentera: how each one proves exploitability (2026)

Eclypsium
CVE-2026-20349: Someone Is Crashing Cisco Firewalls. We Need to Talk About Why.

MIT Technology Review
The Download: AI’s self-improvement problem, and what’s driving the heat

Aikido
Yet another RCE in Gogs, but it's fixed this time!

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Rapid7
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America

CISA Alerts & Advisories
Defending Against an Active Threat to Siemens S7 Series PLCs

Malwarebytes
Scammers are using fake crypto AML checkers to drain your wallet

Schneier on Security
ICE Collecting DNA Samples

Malwarebytes
Update Chrome now: Two critical vulnerabilities fixed

Escape DAST
Pentera Alternatives for Continuous Pentesting: 7 Competitors Compared In-Depth

Talos Intelligence
Describing attacks with crime script analysis

Malwarebytes
Your polite reply to that text is worth $2 on the dark web 

ISC SANS
ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th)

Dark Reading
China-Linked Hacker Shows AI Capabilities in APAC Attack

Rosecurify
Seclog - #191

Auth0
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Sending Email with Token Vault

zerotistic
Reverse-engineering Find My People to stalk my ex a friend, cause I can

Snyk
Remediation Agents, Demystified: Why Fixing Beats Finding

Datadog HQ
How CISA’s BOD 26-04 changes vulnerability prioritization

Teleport Blog
We Had 13 Engineers Spend Three Months Finding Vulnerabilities with LLMs

Datadog HQ
20× the CI traffic without getting slower: How we rebuilt Git serving at Datadog

Fastly
MCP at the Edge: What Changes When MCP Runs Securely in Every POP


2026-08-18

Dark Reading
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

Amazon Security
Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway

Dark Reading
'CoSnitch' Attack Tricked Copilot Into Mapping Out Architecture

Dark Reading
The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed

Dark Reading
CISOs Break Their Silence in 'Declassified' Docuseries

Amazon Security
Security Hub Extended adds Supply Chain Security as its tenth category

Wiz
How to Spot and Stop Rogue Device Joins

GitGuardian
Why Secrets Slip Through Every Layer of Your Security Stack

Cloudflare
BGP Role model: tracking the adoption of RFC 9234

Malwarebytes
Apple fixes another image-processing flaw that could allow code execution

Xint
Xint’s Auto-Remediation Approach: Why Human-in-the-Loop Remains Essential

core-jmp
Physical Memory Is a Universal Kernel Primitive: The eneio64.sys LPE Chain on Windows 11 24H2

ToxSec
Stealing an AI's Thoughts Without Breaking The Encryption

core-jmp
Modern Implant Design: Building Position-Independent Malware with Global State

Ars Technica Security
Microsoft Copilot reveals secret input that allowed it to be hacked

Dark Reading
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud

Dark Reading
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service

Rapid7
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

Wiz
Announcing the 2026 Wiz Partner Alliance Award Winners

CISA Alerts & Advisories
CISA Malcolm

CISA Alerts & Advisories
Siemens Simcenter Nastran

Malwarebytes
Be careful what you put in “anyone with the link” Google Docs

Schneier on Security
LLMs and Contextual Integrity

Malwarebytes
Heights Finance data breach: What customers need to know

Resecurity
Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding

Snyk
Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%

TrustedSec
We've Seen This Movie: The OT/IT Technology Divide

Troy Hunt
Weekly Update 517: Cyber Ransoms

ISC SANS
ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th)

Datadog HQ
Two ways to measure the cumulative impact of experiments

Himanshu Anand
someone is filing your GST return, and it is not your CA

Datadog HQ
Centralize human and agentic work with Datadog Work Management

Datadog HQ
Trace AWS Lambda durable functions with Datadog

Auth0
Device Authorization Flow for a Rust CLI and an Axum API


2026-08-17

Dark Reading
Video Call Exploit Chains Two Flaws in Unisoc Modems

ISC SANS
Apple Patches iOS and macOS, (Mon, Aug 17th)

Dark Reading
'Turf War' Between Claude Agents Leads to Self-Replicating Malware

Dark Reading
Hugging Face Breach Raises Big Questions About AI Security Controls

Eclypsium
The EU CRA Clock is Ticking:Are You Compliant?

The Citizen Lab
Call for Applications: Information Controls Research Program 2026

Amazon Security
Updates to your AWS Sign-In experience

White Knight Labs
UEFI Vulnerability Analysis using AI Part 4: Building the Application

Dark Reading
Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS

Jericho
Apparently Turkeys Obtained Personhood According to AI

Wiz
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

Malwarebytes
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw

Wiz
The Closed Loop Remediation Playbook with Wiz

XBOW
The European Central Bank Just Made Autonomous Offensive Security a Board-Level Problem

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Rapid7
Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline

Schneier on Security
Hacking Public Wi-Fi DNS to Steal Credentials

Malwarebytes
Fake TikTok rewards promise cash you’ll never get

Malwarebytes
Update your Mac: Screen Sharing vulnerability exploited in the wild

Malwarebytes
Why Facebook’s war on ad blockers could help scammers

Rapid7
Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Malwarebytes
A week in security (August 10 – August 16)

Socket
NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment

Moonlock
Can your WhatsApp be hacked? Here’s why you might be at risk

Embrace The Red
Recovering Encrypted LLM Reasoning Traces

Moonlock
Is Ticketmaster legit? Common scams and what buyers should know

Moonlock
How to scan Chrome for viruses and remove them permanently

Greynoise
A New Way to Navigate GreyNoise

ZeroPath
Learning to Cheat: Why an OpenAI Model Hacked Into Hugging Face

Auth0
Auth0 Learning: The New Skill-Building Platform for Developers


2026-08-16

Socket
How AI Agents Expand the Software Supply Chain Attack Surface

Project Discovery
Supply Chain Security Analysis of a 9.5M-Install VS Code Extension

Step Security
ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2

Simon Koeck
From a Schema Name to RCE in n8n


2026-08-15

Step Security
Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.

Project Black
AppFlowy Authenticated SQL Injection

Project Black
AppFlowy Authenticated SQL Injection

Joshua Rogers
The sad, smelly, tasteless life of an influencer


2026-08-14

Rapid7
Metasploit Wrap Up: Lot of summer shells and fit http profiles