219 Security Blogs

Last Updated: 04 Sep 26 04:15 UTC

Blog List | Github | OPML

2026-11-12

Dark Reading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI


2026-10-08

Dark Reading
[Virtual Event] Building a Secure AI Strategy for the Enterprise


2026-09-04

ISC SANS
ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)


2026-09-03

MalwareTech
Machine Speed is a lie: stop trying to fight AI with AI

Amazon Security
Incident response guide for AWS CloudTrail investigations – Part 2

Amazon Security
Incident response guide for AWS CloudTrail investigations – Part 1

Cloudflare
Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models

Dark Reading
Large Enterprises Targeted in Fake Merger & Acquisition Scams

Ars Technica Security
Confused about which VPN is right, US senator asks the NSA for guidance

Dark Reading
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?

Talos Intelligence
The story behind the intelligence

Aikido
MECCHA CHAMELEON can't hide from the RCE

Eclypsium
BTS #81 - Infratrust Pulse, AI's Role in Security

Malwarebytes
StreamRat Android malware spreads through Meta and TikTok ads

Meta Security
ZGateway: Learnings from Putting a Proxy in Front of ZippyDB

Microsoft Security
ASCII smuggling crosses over from AI prompt injection to phishing evasion

ReversingLabs
Best Enterprise File Scanning Tools of 2026

Dark Reading
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours

Silverfort
It’s the swan song of traditional PAM, and that’s good news for security

Bishop Fox Security
Signature Optional - Analysis of CVE-2026-28323

Red Siege InfoSec Blog
Improving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition

MIT Technology Review
The Download: rethinking child safety and fossil-fueled farming

CISA Alerts & Advisories
Inductive Automation Ignition

CISA Alerts & Advisories
IXON VPN Client

CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB2 (Update A)

Dark Reading
'Breeze Comet' Tears Into Brazilian & Global Financial Systems

CISA Alerts & Advisories
OPCFoundation OPC UA LocalDiscoveryServer (LDS)

CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB3

CISA Alerts & Advisories
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)

CISA Alerts & Advisories
Rockwell Automation ControlFLASH

CISA Alerts & Advisories
Rockwell Automation ArmorStart LT

CISA Alerts & Advisories
Rockwell Automation 1756-ENBT Module

CISA Alerts & Advisories
Preparing for the Post-Quantum Era: A Call to Action

CISA Alerts & Advisories
Pyramid Solutions NetStaX EtherNet/IP Stack

Schneier on Security
Researching Employment Scams

MIT Technology Review
Agriculture relies on fossil fuels. It’s costing us.

MIT Technology Review
Scaling agentic AI pilots across the enterprise

Malwarebytes
Your phone or computer may soon ask how old you are

Hunt and Hackett
Recent cyberattacks show how little organisations really know during an incident

Compass Security Blog
CRA Reporting – What you need to know

TrustedSec
LLMHaxor Update

ISC SANS
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)

ISC SANS
ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)

Wiz
How Developers Prevent Production Risk at the Source

Fastly
CVE-2026-82329: JFrog Artifactory Authentication Bypass Exploitation Activity

Datadog HQ
Build and run Datadog workflows from Bits Chat or AI agents

Auth0
Five Reasons Why Your Auth0 Permissions Are Not in your Access Token

Fastly
Building Fastly Log Analytics Tools: An Open-Source Approach to Deeper Insights

Teleport Blog
ISO 42001 Evidence: What Auditors Ask For


2026-09-02

Microsoft Security
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Dark Reading
AI's Vulnerability Surge May Be More Manageable Than First Feared

Dark Reading
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

Amazon Security
Managing identity source transition for AWS IAM Identity Center

Ars Technica Security
I rented a car, and within hours, my driver's license was for sale

Dark Reading
AI Gives Cybercriminals a Dangerous Time Advantage

Binarly
Containers Don't Keep Secrets: Scanning Docker Hub for Leaked Credentials and Private Keys

Amazon Security
Agentic security: Detection and response at machine speed

Schneier on Security
AI Agents Are Now Emailing Me with Their Security Concerns

Rapid7
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Dark Reading
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users

Google Safety & Security
Our latest Linux Foundation Europe donation will build a more private digital world.

Malwarebytes
Tech support scams look different now. Here’s what to watch for

Eclypsium
Cybersecurity Insiders: AI Infrastructure’s Firmware Problem Is Bigger Than Any Single Vendor

Google Safety & Security
Proactive cyber defense for governments and enterprises

Jericho
Lazy Movie Headlines Are Lazy

GitGuardian
OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

ReversingLabs
Get the Spectra Assure Community Plugin for JFrog Artifactory

Palo Alto Networks
Building Securely From Day One: Palo Alto Networks Partners with the Zendesk Startup Program

The Citizen Lab
U.K. Supreme Court Opens Door for Spyware Victims to Sue Foreign States

Xint
Finding Bugs Isn’t Enough: The Difference Between Pointing LLMs to Find Bugs and a Mature AI AppSec Platform

MIT Technology Review
Facilitating AI integration with simplicity at scale

core-jmp
Privilege Escalation from IIS AppPool to NT Authority/SYSTEM via AD CS RPC Endpoint

Malwarebytes
Scammers are getting smarter about where they target you 

MIT Technology Review
The Download: AI puzzles and a path to our nearest star system

CISA Alerts & Advisories
CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Communicating Under Pressure: Best Practices for Service Providers

core-jmp
CATAnA: Exploring the Dangers of SIM-Originating AT Commands in Cellular Devices

core-jmp
Proxmox VE 7.0–8.0.3: Unauthenticated Single-Request Root Auth Bypass (CVE-2023-54391)

Malwarebytes
Two critical Chrome flaws put users at risk on malicious websites

core-jmp
Singularity Rootkit: Evading Elastic Defend Module Load Detection

Ars Technica Security
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

Schneier on Security
Wireless Routers as Motion Detectors

Step Security
Introducing deny list egress policies for Harden-Runner

Step Security
Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners

Malwarebytes
153M+ driver’s licenses for sale on new dark web platform

Malwarebytes
Your AI chats could be used in court

Meta Security
An Organizational Second Brain: Building an AI That Learns From Experts

ISC SANS
ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)

Dark Reading
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Fastly
Building for the Model Hardware Standard

Datadog HQ
Monitor prompt caching to optimize your token usage


2026-09-01

Microsoft Security
Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Krebs on Security
FBI Probes Service Selling 153M+ Drivers Licenses

Troy Hunt
Weekly Update 519: Breaches & Data Integrity

ISC SANS
Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st)

Dark Reading
Attackers Pounce on Critical Artifactory Bug Following Disclosure

Dark Reading
Stronger Security Drives Ransomware Groups to Recruit From Within

Dark Reading
Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise

Dark Reading
AI Model Evaluator METR Hit by Credential Theft, Probing

Palo Alto Networks
Making the Most of the Cloud Marketplace Opportunity

MIT Technology Review
How AI plotted an interstellar journey to Alpha Centauri

Microsoft Security
Cybersecurity IR Workshop: The workshop you shouldn’t miss

Socket
Microsoft Teams Notifications Are Now Available in Socket

Schneier on Security
What’s the Scam?

Aikido
Top DSPM tools in 2026

Schneier on Security
Leaked Russian Cyber-Operations Training Materials

Malwarebytes
Fake GTA 6 leaked copy drains your crypto wallet

Jericho
Odds Are You Are Responsible for that Traffic Slowdown

GitGuardian
Credential Security: What Endpoint Protection Really Means for Secrets

ReversingLabs
How to build effective agentic SOCs: What you need to know

Aikido
The dark figure of supply chain detection

MIT Technology Review
Making the AI-powered case for legacy modernization

Dark Reading
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain

ToxSec
Security Through Obscurity Is Running Out of Time

Cloudflare
How we could save petabytes of cache storage with Zstandard and Pingora

Malwarebytes
TerminalFix looks like ClickFix, but delivers a very different payload

MIT Technology Review
The Download: engineered microbes for crops, and OpenAI’s culture problem

CISA Alerts & Advisories
Rockwell Automation Historian ME

CISA Alerts & Advisories
Rockwell Automation RSLinx Classic

CISA Alerts & Advisories
Rockwell Automation Redundancy Module Configuration Tool

CISA Alerts & Advisories
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix

CISA Alerts & Advisories
Rockwell Automation FactoryTalk Activation Manager

CISA Alerts & Advisories
Rockwell Automation Logix Platform

Wiz
Introducing Continuous Vulnerability Assessment: Real-Time Defense for the AI Threat Era

Malwarebytes
Infostealers are hijacking Claude accounts at users’ expense

Schneier on Security
Rewiring Democracy Series on The Renovator

MIT Technology Review
How engineered microbes could help feed the world’s crops

clearbluejar's Blog
Don't Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models

TrustedSec
waf-fu, or Some Log Replay Nonsense

Socket
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%

ISC SANS
ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st)

Rosecurify
Seclog - #193

Auth0
How to Make Your AI Agent Enterprise-Ready: Enabling Enterprise-Managed Authorization for Client Apps in Auth0

Datadog HQ
Visualize how CUPED adjusts experiment results with Datadog

Nebula Security
Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu

Datadog HQ
From traces to experiments: A loop for improving AI agents

Datadog HQ
Making Rust observability reliable at scale with OpenTelemetry

Fastly
Preserving Analytics Attribution During Bot Challenges: A Fastly VCL & NGWAF Deep Dive


2026-08-31

Dark Reading
Anthropic Users Hit by Infostealer Attacks, Session Thefts

Socket
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat

Dark Reading
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks

Dark Reading
The Guardrails Debate: Security Researcher Changes His Mind

Hybrid Analysis Blog
Hybrid Analysis, Reengineered

ISC SANS
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)

Amazon Security
We invited a direct competitor into Security Hub Extended. Here’s why.

Schneier on Security
Is Someone Hacking DoD Refrigerators?

MIT Technology Review
The Hugging Face hack could indicate cultural issues at OpenAI

Dark Reading
AI Model Rules Are Not Security Controls

Auth0
Securing Agentic Commerce

Amazon Security
Automate IAM Identity Center governance with continuous discovery and reporting

Ars Technica Security
Think twice before installing this device promising free movies

Include Security
EncryptedSharedPreferences is Dead: Here’s What You Should Use Instead

Jericho
How Much Lipstick Can That CVE Pig Wear?

GitGuardian
AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

Malwarebytes
McKesson confirms cyber incident after ShinyHunters claims patient-data theft

Socket
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds

Bishop Fox Security
Traefik | Version Through 3.7.11

Cloudflare
Introducing Adaptive Intelligence: Undermining the economics of every bot attack

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Schneier on Security
Hiding Prompt Injection in Legal Filing

Malwarebytes
A week in security (August 24 – August 30)

Moonlock
8 common Fiverr scams: What they look like and how to avoid them

Moonlock
AnyDesk scams: How fraudsters turn legitimate software into a scam

ISC SANS
ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st)

Fastly
Instantly AI-Agent-Ready with WebMCP on Demand

Auth0
Type-Safe Authentication in Rust with Auth0 and Axum

Datadog HQ
Troubleshoot and secure your code faster with Datadog’s Bitbucket Cloud Source Code integration

Datadog HQ
Respond to security threats faster with Tines and Observability Pipelines

Datadog HQ
How Bits Database Optimization proves a query rewrite is faster

Greynoise
GreyNoise + CrowdStrike: Real-Time Edge Intelligence in Falcon Next-Gen SIEM and Charlotte Agentic SOAR

Fastly
Why SaaS and PaaS Infrastructure Leaders Are Facing 22% More Unwanted Bots

Semgrep
Feeling the heat from Malicious Packages? Cool off with Cooldowns


2026-08-30

ISC SANS
YARA-X 1.20.0 Release, (Sun, Aug 30th)


2026-08-29

Microsoft Security
TerminalFix campaign deploys a reverse tunnel through multistage intrusion

Binarly
MLTracer: Syscall-Based Malicious Model Detection and Labeling, with Static-Scanner Evasion Taxonomy


2026-08-28

Step Security
@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow

Step Security
Dev Machine Guard Now Inventories Browser Extensions on Developer Machines

Step Security
Dev Machine Guard Now Inventories Where Developer Credentials Live

Aikido
Popular code generator for TanStack Query hit by supply chain worm

Schneier on Security
Friday Squid Blogging: Truckload of Squid Spills in Rhode Island

Socket
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack

Aikido
Securing Docker images

Dark Reading
Hundreds of OpenAI Agents Invaded Hugging Face Servers

Amazon Security
Extend your data perimeter to the AWS Management Console with Private Access

Dark Reading
Offensive Security Investments Surge as AI Threats Increase

ReversingLabs
Shai-Hulud worm arrests: Why this is not the end

Socket
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 35

Rapid7
Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

Dark Reading
You Need Cyber Deception for OT

Malwarebytes
Protect your WhatsApp account with new passkey and 2FA upgrades

Dark Reading
Defining an AI Kill Switch Is Hard, but Necessary

Socket
Socket Now Protects the Microsoft Edge Extension Ecosystem

Dark Reading
The Vulnpocalypse Is Repricing the Bug Bounty Economy

Cloudflare
BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents

core-jmp
Process ID Mutation via BYOVD: Evading Sysmon Telemetry Through Kernel Exploitation

Malwarebytes
The AI agent swarm that attacked Hugging Face is a warning for the future

Ars Technica Security
Authorities arrest 2 alleged members of prolific hacking group TeamPCP

Schneier on Security
AI Doesn’t Mean the End of Mathematics—at Least Not Yet

Rapid7
PaperCut NG/MF Critical Zero-Day Exploited in the Wild

core-jmp
I Found a KVM Guest-to-Host Heap Corruption Bug and Someone Else Got There First

ISC SANS
Some Malicious PE Stats, (Thu, Aug 27th)