2026-09-22
2026-09-21
Meta Security
Open-Sourcing Rebalancer: A Generic, High-Performance Library for Solving Assignment Problems
Amazon Security
Transforming Bedrock Guardrails events into OCSF with CloudWatch
Schneier on Security
Reverse-Engineering Flock Cameras
Offensive Security
10 Lessons Reshaping Security After Black Hat and DEF CON 2026
Cloudflare
Python Workers are now generally available
MIT Technology Review
The Download: investigating deaths at the US border’s “virtual wall”
MIT Technology Review
The US spent billions on border surveillance. Why can’t it catch people before they die?
MIT Technology Review
She died at the San Diego border. A surveillance camera was in plain sight
MIT Technology Review
4 ways to address the failures we found along the US border’s “virtual wall”
MIT Technology Review
How we made the first comprehensive map of deaths along the US border’s “virtual wall”
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Trail of Bits
SAML: A fractal of bad design
Malwarebytes
A week in security (September 14 – September 20)
Rosecurify
Seclog - #196
Elastic Security Labs
Cloud Threat Emulation on Autopilot: Context is Everything
Auth0
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Human-in-the-Loop Approval
2026-09-20
Artem Golubin
Real attackers don't think in bug bounty scopes
Ars Technica Security
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
MaskRay's Blog
Linker I/O tricks and their downsides
2026-09-18
Schneier on Security
Friday Squid Blogging: On Squid Egg Sacs
Socket
Happy Birthday, Shai-Hulud
Dark Reading
MFA Won't Save You From OAuth Consent Abuse
Ars Technica Security
Researchers used Claude to hack OpenAI
Bishop Fox Security
From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion
MIT Technology Review
The Download: AI’s extinction risk and bioweapons threat
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
MIT Technology Review
Could AI really kill us all? Your questions, answered.
Schneier on Security
Are AIs Still Struggling with CAPTCHAs?
Trail of Bits
Auditing in the age of (good enough) AI
MIT Technology Review
The specter of AI-enabled bioweapons is a wake-up call for biotech
Palo Alto Networks
Defining the Standard for AI Security
Elastic Security Labs
One SOC, 100 projects: running centralized alert triage on Elastic Security Serverless
2026-09-17
Malwarebytes
Flock cameras are tracking people as well as cars
Ars Technica Security
LLMs respond differently to harmful prompts when AI watermarking is used
Talos Intelligence
Should you care about an “AI slowdown?”
Microsoft Security
From guidance to action: Security fundamentals that materially reduce risk
Malwarebytes
Revolut phishing texts appear days after data breach
Bishop Fox Security
MikroTrick: Inside the RouterOS Takeover Chain
MIT Technology Review
The Download: mice with part-human brains and climate tech innovators
CISA Alerts & Advisories
Schneider Electric NetBotz 5 750/755
CISA Alerts & Advisories
Schneider Electric Modicon M340 Controller and Communication Modules
CISA Alerts & Advisories
Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)
CISA Alerts & Advisories
Mitsubishi Electric GX Works3 and Motion Control Settings
CISA Alerts & Advisories
Hitachi Energy FACTS Control Platform (FCP)
CISA Alerts & Advisories
ABB Ability Edgenius
CISA Alerts & Advisories
Schneider Electric PowerChute Serial Shutdown
CISA Alerts & Advisories
Bransys ELD
Schneier on Security
How Candidates Could Use AI for Good
Talos Intelligence
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
MIT Technology Review
Meet the innovators under 35 shaping climate tech
Ars Technica Security
Hackers reveal how Flock cameras really track cars and people
TrustedSec
Unpacking a laZzzy Donut
Praetorian
Credentials Are Still the Shortest Path In
2026-09-16
Ars Technica Security
Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack
Zero Day Initiative
The Apple Security Update Review for September 2026
Krebs on Security
Data Broker Radaris Loses Domains in Privacy Fight
Dark Reading
Fighting Your Dragons Through Tough Tech Times
ReversingLabs
Memory-safe programming goes from advocacy to adoption
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Using Cyber Decoys to Strengthen Detection and Response
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA News
New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity
Schneier on Security
Fake CAPTCHA Scams
core-jmp
Red Heron Exploits Gitea n-day CVE-2026-60004, Exposing JITTERLY and the SIXZUT Linux Rootkit
Talos Intelligence
Securing the unpatchable in an age of AI-driven vulnerabilities
Datadog HQ
Transform and route security logs to Microsoft Sentinel tables using Observability Pipelines
Sansec Threat Research
Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware
2026-09-15
Amazon Security
Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline
Malwarebytes
How to opt out of AI chatbot training
ReversingLabs
AI coding puts Secure by Design in the spotlight
CISA Alerts & Advisories
Siemens Reyrolle 7SR5
CISA Alerts & Advisories
Digital Watchdog VMAX DVR and NVR Product Lineups
CISA Alerts & Advisories
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers
CISA Alerts & Advisories
Siemens Teamcenter
CISA Alerts & Advisories
Wärtsilä FOS-Onboard
CISA Alerts & Advisories
Siemens Mendix SAML
CISA Alerts & Advisories
mySCADA myPRO Manager
CISA Alerts & Advisories
CareCam CM2507
CISA Alerts & Advisories
Schneider Electric SCADAPack x70 Products
Schneier on Security
25 Years of Mass Surveillance Is Enough
Trail of Bits
1Password's AI patching benchmark is misleading
Schneier on Security
On the NSA’s Supercomputer from the 1960s
CrankySec
Appeal to deez nutz
Accomplish
Escaping the OpenAI Codex sandbox, twice