2026-09-23
watchTowr Labs
Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
Amazon Security
ICYMI: August 2026 @AWS Security
Ars Technica Security
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
Zero Day Initiative
CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer
MIT Technology Review
A congressional representative just proposed killing America’s border tower program
Microsoft Security
Reimagining the SOC for the agentic era in Microsoft Defender
Amazon Security
Supporting ASD’s multi-factor authentication campaign: Why MFA matters more than ever
Step Security
Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
Eye Security Research
AI vulnerability discovery using the Kitten process: How we found CVE-2026-75754
MIT Technology Review
The Download: India’s smart glasses menace and AI’s trillion-dollar gamble
CISA Alerts & Advisories
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators
Schneier on Security
Research on Models Engaging in Genie-Like Behavior
MIT Technology Review
The AI Hype Index: AI loves cheating
MIT Technology Review
Smart glasses are already causing havoc in India
Voidstar Security Research Blog
Extending Scapy for Hardware Reverse Engineering
Arch Cloud Labs
Testing BTRFS w/ Release Candidate Kernels on Arch Linux
Datadog HQ
Configure RUM SDKs remotely from Datadog
2026-09-22
Ars Technica Security
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
The Citizen Lab
UN Reports Citing Citizen Lab Submissions Published
The Citizen Lab
Submission to the Immigration and Refugee Board of Canada
Malwarebytes
Some cheap smart glasses are a security disaster
Microsoft Security
Unmasking EvilTokens: Getting to the root of device code phishing
MIT Technology Review
Roundtables: The Deadly Failures of The Virtual Border Wall
GitGuardian
GitHub App Private Keys: 474 Leaked Keys Exposed
Cloudflare
Introducing Worker Previews: Isolated preview environments for every change your agent makes
MIT Technology Review
The Download: why AI’s latest breakthroughs and fears may be more hype than reality
Dark Reading
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds
CISA Alerts & Advisories
Siemens SIPLUS and SIMATIC Products
CISA Alerts & Advisories
OpenPLC Runtime v3
CISA Alerts & Advisories
Siemens Industrial Edge Management
CISA Alerts & Advisories
Siemens Desigo CC family
CISA Alerts & Advisories
lwIP (Lightweight IP)
CISA Alerts & Advisories
Siemens SIMOVE Fleetmanager and SIPLANT
CISA Alerts & Advisories
Siemens WTV676 and WTV776
CISA Alerts & Advisories
lwIP TCP/IP Stack MQTT Client Application
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Siemens Siveillance Control
MIT Technology Review
Don’t be fooled by this summer of AI hype
Schneier on Security
GPT-6 Astra Breaks an Old Enigma Message
Talos Intelligence
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Talos Intelligence
Introducing CAIRN: Frontier tracking for AI-integrated malware
Malwarebytes
Researchers used Claude to hack OpenAI
Project Black
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Project Black
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
2026-09-21
Ars Technica Security
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
Meta Security
Open-Sourcing Rebalancer: A Generic, High-Performance Library for Solving Assignment Problems
Amazon Security
Transforming Bedrock Guardrails events into OCSF with CloudWatch
Schneier on Security
Reverse-Engineering Flock Cameras
Offensive Security
10 Lessons Reshaping Security After Black Hat and DEF CON 2026
Cloudflare
Python Workers are now generally available
MIT Technology Review
The Download: investigating deaths at the US border’s “virtual wall”
MIT Technology Review
How we made the first comprehensive map of deaths along the US border’s “virtual wall”
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
MIT Technology Review
4 ways to address the failures we found along the US border’s “virtual wall”
Trail of Bits
SAML: A fractal of bad design
Malwarebytes
A week in security (September 14 – September 20)
Rosecurify
Seclog - #196
Elastic Security Labs
Cloud Threat Emulation on Autopilot: Context is Everything
Auth0
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Human-in-the-Loop Approval
2026-09-20
Artem Golubin
Real attackers don't think in bug bounty scopes
Ars Technica Security
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
MaskRay's Blog
Linker I/O tricks and their downsides
2026-09-19
Joshua Rogers
Being silly is the whole point
Accomplish
Guest to host: escaping Docker's hypervisor
2026-09-18
Schneier on Security
Friday Squid Blogging: On Squid Egg Sacs
Socket
Happy Birthday, Shai-Hulud
Dark Reading
MFA Won't Save You From OAuth Consent Abuse
Ars Technica Security
Researchers used Claude to hack OpenAI
Bishop Fox Security
From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Schneier on Security
Are AIs Still Struggling with CAPTCHAs?
Trail of Bits
Auditing in the age of (good enough) AI
Elastic Security Labs
One SOC, 100 projects: running centralized alert triage on Elastic Security Serverless
2026-09-17
Malwarebytes
Flock cameras are tracking people as well as cars
Ars Technica Security
LLMs respond differently to harmful prompts when AI watermarking is used
Talos Intelligence
Should you care about an “AI slowdown?”
Microsoft Security
From guidance to action: Security fundamentals that materially reduce risk
Malwarebytes
Revolut phishing texts appear days after data breach
Bishop Fox Security
MikroTrick: Inside the RouterOS Takeover Chain
CISA Alerts & Advisories
Schneider Electric PowerChute Serial Shutdown
CISA Alerts & Advisories
Hitachi Energy FACTS Control Platform (FCP)
CISA Alerts & Advisories
Mitsubishi Electric GX Works3 and Motion Control Settings
CISA Alerts & Advisories
Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)
CISA Alerts & Advisories
Bransys ELD
CISA Alerts & Advisories
ABB Ability Edgenius
CISA Alerts & Advisories
Schneider Electric Modicon M340 Controller and Communication Modules
CISA Alerts & Advisories
Schneider Electric NetBotz 5 750/755
Schneier on Security
How Candidates Could Use AI for Good
Talos Intelligence
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
Ars Technica Security
Hackers reveal how Flock cameras really track cars and people
TrustedSec
Unpacking a laZzzy Donut
Praetorian
Credentials Are Still the Shortest Path In