2026-09-28
Github Security Blog
How we found 24 Android vulnerabilities using our open source AI security agent
MIT Technology Review
When can we say AI made a scientific discovery?
Offensive Security
CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API
Krebs on Security
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Microsoft Security
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
MIT Technology Review
The Download: rogue agent liability and the AI Hype Index
Schneier on Security
New Attack Against RSA
watchTowr Labs
Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)
MIT Technology Review
Who’s liable when AI agents go rogue?
Malwarebytes
A week in security (September 21 – September 27)
Elastic Security Labs
Quarantined isn't contained: Agentic phishing response with Elastic and Sublime
2026-09-27
Cloudflare
Cloudflare’s 2026 Annual Founders’ Letter
CISA Alerts & Advisories
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
2026-09-26
2026-09-25
Krebs on Security
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
Schneier on Security
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
Ars Technica Security
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Eye Security Research
Rise of the Jev-Clones
Bishop Fox Security
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
Malwarebytes
Criminals turn placeholder domain into ClickFix trap
MIT Technology Review
The Download: the Pentagon’s AI-powered lie detector and young organ limits
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Schneier on Security
On Anthropic’s AI Misuse Report
Trail of Bits
Don't let TEEs break your MPC
MIT Technology Review
The Pentagon wants $30 million to build an AI-powered lie detector
MIT Technology Review
Young organs may not be a fountain of youth for recipients
Teleport Blog
How to Eliminate Shared Production Kubeconfigs
2026-09-24
Github Security Blog
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
Red Siege InfoSec Blog
Red Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect
Talos Intelligence
Trust and the enticing consultancy offer
Microsoft Security
What’s new in Microsoft Security: September 2026
Microsoft Security
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Dark Reading
3 Cyber Threats That Defined the Summer of 2026
Dark Reading
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
Bishop Fox Security
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
MIT Technology Review
The Download: a bid to scrap the virtual wall and AI hits Climate Week
CISA Alerts & Advisories
Eufy Omni C20, Omni X10 Pro
CISA Alerts & Advisories
Siemens Mendix Runtime (Update A)
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Botslab G980H Dashcams
Ars Technica Security
There's a new way to break RSA that's faster than anything we've seen before
Schneier on Security
Malicious npm Packages That Evade Defenses
MIT Technology Review
AI is dominating the conversation at Climate Week
TrustedSec
What's New in hate_crack Since 2.0
Project Black
Bypassing EDR with Local AI
Project Black
Bypassing EDR with Local AI
Accomplish
Escaping the Cloudflare sandbox
Meta Security
Bringing Private Processing to Meta AI Glasses
2026-09-23
watchTowr Labs
Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
Amazon Security
ICYMI: August 2026 @AWS Security
Ars Technica Security
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
Zero Day Initiative
CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer
MIT Technology Review
A congressional representative just proposed killing America’s border tower program
Microsoft Security
Reimagining the SOC for the agentic era in Microsoft Defender
Amazon Security
Supporting ASD’s multi-factor authentication campaign: Why MFA matters more than ever
Step Security
Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
Eye Security Research
AI vulnerability discovery using the Kitten process: How we found CVE-2026-75754
MIT Technology Review
The Download: India’s smart glasses menace and AI’s trillion-dollar gamble
CISA Alerts & Advisories
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators
Schneier on Security
Research on Models Engaging in Genie-Like Behavior
Voidstar Security Research Blog
Extending Scapy for Hardware Reverse Engineering
Arch Cloud Labs
Testing BTRFS w/ Release Candidate Kernels on Arch Linux
Datadog HQ
Configure RUM SDKs remotely from Datadog
2026-09-22
Ars Technica Security
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
The Citizen Lab
UN Reports Citing Citizen Lab Submissions Published
The Citizen Lab
Submission to the Immigration and Refugee Board of Canada
Malwarebytes
Some cheap smart glasses are a security disaster
Microsoft Security
Unmasking EvilTokens: Getting to the root of device code phishing
GitGuardian
GitHub App Private Keys: 474 Leaked Keys Exposed
Cloudflare
Introducing Worker Previews: Isolated preview environments for every change your agent makes
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
lwIP TCP/IP Stack MQTT Client Application
CISA Alerts & Advisories
Siemens WTV676 and WTV776
CISA Alerts & Advisories
OpenPLC Runtime v3
CISA Alerts & Advisories
lwIP (Lightweight IP)
CISA Alerts & Advisories
Siemens Industrial Edge Management
CISA Alerts & Advisories
Siemens Siveillance Control
CISA Alerts & Advisories
Siemens Desigo CC family
CISA Alerts & Advisories
Siemens SIMOVE Fleetmanager and SIPLANT
CISA Alerts & Advisories
Siemens SIPLUS and SIMATIC Products
Dark Reading
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds
Palo Alto Networks
Introducing Unit 42 Continuous Frontier AI Defense
Schneier on Security
GPT-6 Astra Breaks an Old Enigma Message
Talos Intelligence
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Talos Intelligence
Introducing CAIRN: Frontier tracking for AI-integrated malware
Malwarebytes
Researchers used Claude to hack OpenAI
Project Black
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Project Black
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
2026-09-21
Ars Technica Security
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day