2026-09-09
Microsoft Security
Threat matrix: Mapping threats across cloud web applications
Ars Technica Security
4 groups caught using the same Chrome and Windows exploit kit
Microsoft Security
Passkey-themed social engineering leads to identity and cloud compromise
Schneier on Security
Driver’s License Data for Sale
MIT Technology Review
The Download: OpenAI’s turning point for math and a battery record
core-jmp
How Can You Not Be Romantic About UNIX Domain Sockets: A 40-Year Kernel Bug From the DEF CON Stage
CISA News
CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Schneier on Security
Claude Fable Solves a Historical Cipher
Trail of Bits
A “proof” of Fermat’s Last Theorem that fits the margin
core-jmp
N-able N-Central Critical Authentication Bypass: CVE-2026-86206 and CVE-2026-86207 Chained Attack
MIT Technology Review
Batteries just broke another record in the US
MIT Technology Review
Understanding the thermal ceiling in portable power
MIT Technology Review
What OpenAI’s latest controversy tells us about the future of math
2026-09-08
Talos Intelligence
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Krebs on Security
Microsoft Plugs Nearly 1,000 Security Holes
Dark Reading
Patch Tuesday Sets Another Record With 974 CVEs
Ars Technica Security
Why this month's Microsoft patch release is a doozy
Zero Day Initiative
The September 2026 Security Update Review
Schneier on Security
AIs as Modern Genies
ReversingLabs
AI summary attack conceals code that tampers with LLMs
MIT Technology Review
The Download: our 35 Innovators Under 35 this year
CISA Alerts & Advisories
CareCam Pro IP Cameras
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
MIT Technology Review
This founder is teaching chips how to recycle (their energy)
MIT Technology Review
This AI entrepreneur is developing agents that can plan ahead for the unexpected
MIT Technology Review
This founder is making cheaper, cleaner steel
MIT Technology Review
This geneticist’s age-reversal tech could help restore sight
Schneier on Security
Stealing AI Reasoning Traces
Talos Intelligence
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
Talos Intelligence
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Okta Security
Hunting Vulnerabilities Using Frontier Models
Rosecurify
Seclog - #194
Datadog HQ
Coordinate product launches with Datadog
2026-09-07
MIT Technology Review
The Download: the hunt for underground hydrogen and more rogue OpenAI agents
Schneier on Security
Automobile Camouflage to Hide from Flock Cameras
Malwarebytes
A week in security (August 31 – September 6)
Infernux Blog
Log Horizon 0.9.0
2026-09-05
Sansec Threat Research
StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack
2026-09-04
Ars Technica Security
OpenAI agents discussed ways to escape their sandbox on public wiki
Schneier on Security
Friday Squid Blogging: Squid on a Stick at the New York State Fair
Microsoft Security
How to secure edge AI in customer-owned environments
Amazon Security
OSPAR 2026 report now available with 167 services in scope
Ars Technica Security
Once popular for attacking AI, ASCII smuggling is embraced by spammers
Malwarebytes
The hidden work of modernizing Malwarebytes
Schneier on Security
Using a VM to Contain an AI Agent
Malwarebytes
X Money rollout linked to password-reset attacks
Dark Reading
Insurers Search for Answers to Rein in Rogue AI
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Schneier on Security
Security Vulnerability in a Voting System
Schneier on Security
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
Elastic Security Labs
Data access: the hidden cost of security vendor lock-in
zerotistic
Hey Siri, welcome to my Minecraft server
2026-09-03
Ars Technica Security
Confused about which VPN is right, US senator asks the NSA for guidance
Talos Intelligence
The story behind the intelligence
Dark Reading
What the AI Warning Letter Completely Missed
Microsoft Security
ASCII smuggling crosses over from AI prompt injection to phishing evasion
Elastic Security Labs
How to correlate Kubernetes audit logs with container runtime data
ReversingLabs
Best Enterprise File Scanning Tools of 2026
Bishop Fox Security
Signature Optional - Analysis of CVE-2026-28323
Red Siege InfoSec Blog
Improving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition
CISA Alerts & Advisories
Pyramid Solutions NetStaX EtherNet/IP Stack
CISA Alerts & Advisories
OPCFoundation OPC UA LocalDiscoveryServer (LDS)
CISA Alerts & Advisories
Preparing for the Post-Quantum Era: A Call to Action
CISA Alerts & Advisories
IXON VPN Client
CISA Alerts & Advisories
Rockwell Automation ControlFLASH
CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB2 (Update A)
CISA Alerts & Advisories
Inductive Automation Ignition
CISA Alerts & Advisories
Rockwell Automation 1756-ENBT Module
CISA Alerts & Advisories
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)
CISA Alerts & Advisories
Rockwell Automation ArmorStart LT
CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB3
Schneier on Security
Researching Employment Scams
Malwarebytes
Your phone or computer may soon ask how old you are