204 Security Blogs

Last Updated: 28 Jul 26 19:04 UTC

Blog List | Github | OPML

2026-07-29

Rapid7
How AI is Rewriting the Zero-Day Playbook for Preemptive Security


2026-07-28

Amazon Security
AWS KMS or AWS CloudHSM: Choose the right key management solution

Rapid7
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)

Step Security
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan

The Citizen Lab
Co-Founder of Controversial Spyware Firm Had Israeli Diplomatic Passport

Amazon Security
2026 Phase 1a IRAP report is now available on AWS Artifact for Australian customers

Dark Reading
'Certighost' Flaw Haunts Microsoft Active Directory Certificates

Github Security Blog
Disrupting supply chain attacks on npm and GitHub Actions

Wiz
The risk hiding behind exposed MCP servers

Xint
Findings Management to Combat Report Overload

Socket
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan

Step Security
2026 Mid-Year Update: On Pace for Our Biggest Year Yet

ToxSec
Ignore Previous Instructions: From Meme to CVSS 9.3 [Special Guest Post]

Mend
Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update

GitGuardian
How to Reduce Time to Revoke for Exposed Credentials

Rapid7
Rapid7 Cyber GRC is now available: Turn security action into compliance proof

Rapid7
The Next Evolution of MDR: Preemptive Defense and Agentic Investigation

Cloudflare
Natural disasters and government interference: examining Q2 2026’s major Internet disruption events

Malwarebytes
We rebuilt Malwarebytes Mobile Security for the scams of today 

Malwarebytes
Shared Claude chats were searchable on Google

Dark Reading
Former Citigroup CISO Blauner on What Makes A Great Security Leader

MIT Technology Review
The Download: OpenAI’s predictable hack, and an AI stock sell-off

Eye Security Research
AI-powered Phishing-as-a-Service: Inside Two BEC Kits

CISA Alerts & Advisories
MikroTik RouterOS and Cloud Hosted Router

CISA Alerts & Advisories
Siemens Mendix Runtime

CISA Alerts & Advisories
igloohome Smart Lock Mobile Application

CISA Alerts & Advisories
Siemens Desigo CC

CISA Alerts & Advisories
Siemens SIMATIC S7-PLCSIM Advanced

CISA Alerts & Advisories
CI Fortify – Advice for isolating vital systems

CISA News
CISA Joins Australia and Others to Publish Guidance to Isolate Operational Technology and Enabling Systems in Critical Infrastructure

CISA Alerts & Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

CISA Alerts & Advisories
ABB KNX Update Tool

Malwarebytes
Update your iPhone, iPad and Mac to fix Apple security holes

Malwarebytes
Vatican’s Click To Pray app exposed personal data from 700,000 users

Schneier on Security
Axon Is Another License Plate Surveillance Company

Wiz
Accelerating CISA BOD 26-04 Vulnerability and Triage Activities through Wiz

Trail of Bits
How we use /goal to find bugs in Patch the Planet

Talos Intelligence
IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

MIT Technology Review
Samsung’s chip workers are jumping ship to rival SK Hynix

Eye Security
Shadow AI and EU Sovereignty: The AI That Is Already in the Room

Rapid7
Rapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer success

ISC SANS
AutoIT Payload Injector , (Tue, Jul 28th)

TrustedSec
AI Directives and AI Strategy Development

ISC SANS
ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)

Dark Reading
AI Agent Drives Espionage Attack on Thai Ministry of Finance

Rosecurify
Seclog - #188

Datadog HQ
Investigate every security event with an AI agent, without the frontier bill


2026-07-27

Socket
Socket Releases Free Certified Patches for Nuxt Security Vulnerabilities

Jericho
Research: Hacking-adjacent Incident from 1966

Ars Technica Security
Microsoft unveils AI security tools it says outperform competing platforms

Dark Reading
Agentic Browsers Rewind Web Security by 20 years

Dark Reading
'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure

Dark Reading
FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown

Amazon Security
AWS Shield Advanced is embracing the AWS WAF Anti-DDoS managed rule group: What changes and how to prepare

Malwarebytes
Aftercall ads are driving Android users crazy

Dark Reading
Why Resetting Passwords No Longer Stops Attackers

MIT Technology Review
OpenAI called the Hugging Face attack unprecedented. But we’ve been here before.

Dark Reading
Adversaries Don't Need a Zero-Day — They Read Your Rulebook

Artem Golubin
Writing arenas in Rust from scratch

Microsoft Security
Rethinking security for the age of AI

Microsoft Security
Enhancing AI security through global AI red teaming

Amazon Security
Announcing the Cloud Security Alliance on AWS Compliance Guide

Ars Technica Security
Activist charged with felony after giving border agent "duress code" that wiped his phone

Exodus Blog
From Virtual Share to Physical Shell: Leveraging Windows’ Inconsistent Access Control for LPE

Malwarebytes
Sextortion scammers are exploiting ShinyHunters data leaks

Malwarebytes
What’s your data worth on the dark web? (Lock and Code S07E15)

MIT Technology Review
How lasers could help provide fuel for nuclear reactors

Wiz
Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym

Cloudflare
We’re open-sourcing our privacy proxy CLI

MIT Technology Review
The Download: lasers for nuclear fuel, and organ preservation advances

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

MIT Technology Review
The path to artificial superintelligence

MIT Technology Review
Closing the data loop in AI-driven drug discovery

MIT Technology Review
Building the enterprise environment for agentic AI

Schneier on Security
Cognyte Sells a Mobile Cell Surveillance Van

ISC SANS
Java Spring Boot "heapdump" scans, (Mon, Jul 27th)

Malwarebytes
A week in security (July 20 – July 26)

Socket
The AI Industry Is Betting on Open Weights

ISC SANS
ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th)

Snyk
What Is AI Pentesting and How Does It Works?

Fastly
Automated Payments at the Edge with x402 and Fastly Compute

Elastic Security Labs
Inside Elastic InfoSec's agentic SOC: How we cut AI agent LLM calls by 60%

Datadog HQ
Normalize security logs to Google SecOps UDM with Observability Pipelines

Auth0
The Self-Service Roadmap: Navigating the Auth0 Dashboard Subscriptions Tab

Star Labs
When AI Makes 0-Days Feel Like N-Days


2026-07-26

ISC SANS
Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)

ToxSec
Hacking Hugging Face to Cheat a Benchmark

Filippo Valsorda
Production ML-DSA Verification in 350 Lines of Python

Troy Hunt
Weekly Update 514: This Week in Data Breaches

Ali Yazdani
The Part Everyone Misses in Supply Chain Vulnerability and SBOM Management


2026-07-25

Step Security
Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials

Joshua Rogers
33 Vulnerabilities in cJSON


2026-07-24

Dark Reading
CISOs vs. Boards: Myth or Misunderstanding?

Schneier on Security
Friday Squid Blogging: Illex Squid Catch in the Falklands

Amazon Security
Accelerating AWS Network Firewall troubleshooting with AWS DevOps Agent

Dark Reading
Escape Artists: 'Incorrigible' AI Models Resist Rehabilitation

Aikido
Top LLM security tools to protect AI applications

Cloudflare
BGP ORIGIN attribute manipulation and its impact on the Internet

MIT Technology Review
The quest to keep organs alive outside the body

GitGuardian
Why SAST and DAST Aren't Enough for Secrets Security

Malwarebytes
Don’t get fooled by TikTok resin art scams

Socket
Fake Corepack Site Distributes Infostealer and Proxyware to Developers

Malwarebytes
Call of Duty Mobile scam uses fake free points to steal player accounts

Varonis
5 AI Security Challenges in 2026 and Why They Matter

Malwarebytes
OpenAI’s agent escaped its sandbox during a security test

The Citizen Lab
How Iran Uses Cellular Infrastructure to Target US Military Phones

Auth0
Agentic Loops and Agent Graphs: Security Risks You Need to Know

Aikido
Top Acunetix alternatives for automated vulnerability scanning

Malwarebytes
Google wants to store a selfie video of your face

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 30

Dark Reading
Vatican's Official Prayer App Leaks 700K+ Global Users' PII

Dark Reading
Default Azure Automation Setting Enables Cross-Tenant Identity Takeover

MIT Technology Review
The Download: an organ transplant breakthrough, and homegrown Chinese chips

SentinelOne
Your Best Analyst Shouldn’t Be a Person. It Should Be a Capability Everyone Can Summon.

Escape DAST
Why does the rise of Agentic AI force security teams to become research-aware?

Malwarebytes
Beyond the Play Store: How Android threats really spread

Schneier on Security
Why AI Needs a “Genie Coefficient”

Escape DAST
AI pentesting, Mission log: July

Dark Reading
Europe's Multilingual Reality Exposes AI Security Gaps

TrustedSec
CCPA Update: Cybersecurity Requirements (Part 2)

Moonlock
ClickLock Stealer abuses macOS password prompts

Moonlock
New CrashStealer malware pretends to be Apple’s Crash Reporter

ISC SANS
ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)

Elastic Security Labs
Inside Elastic InfoSec's agentic SOC: When to inline your agent's skills for a 5× cost reduction

Teleport Blog
VPN Alternative for Internal Web Apps | Teleport


2026-07-23

Dark Reading
Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets

Cloudflare
Introducing Cache Response Rules

Talos Intelligence
Don’t swing at everything

Amazon Security
Enterprise security at machine speed: AWS Black Hat 2026 preview

Aikido
Better generic secrets detection starts with finding non-secrets

Github Security Blog
The case for a cooldown: Why Dependabot now waits before issuing version updates

ToxSec
GhostApproval: When the AI Approval Prompt Lies

Microsoft Security
Email threat landscape: Q2 2026 trends and insights

GitGuardian
Why identity-local signals and topology signals are two layers of the same blast radius

ISC SANS
When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd)

SentinelOne
Mount Here, Read There: Twin Path Traversal CVEs in Kubernetes Storage

Rapid7
What Happened Between OpenAI and Hugging Face?

CISA News
CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity

CISA Alerts & Advisories
MZ Automation lib60870

CISA Alerts & Advisories
Johnson Controls C-CURE 9000 and Victor application server

CISA Alerts & Advisories
Panduit IntraVUE

CISA Alerts & Advisories
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite

CISA Alerts & Advisories
Rockwell Automation ThinManager

CISA Alerts & Advisories
MZ Automation libIEC61850

CISA Alerts & Advisories
Johnson Controls XAAP Android

CISA Alerts & Advisories
Weintek cMT3092X

Rapid7
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Malwarebytes
Millions of cars could be tracked and unlocked by a hidden security flaw

Malwarebytes
WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw

Dark Reading
Agentic AI Challenges Progress in Confidential Computing

Schneier on Security
End-to-End Encryption and “Going Dark”

Offensive Security
The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?

Talos Intelligence
Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

Talos Intelligence
Preview: Cisco Talos at Black Hat USA 2026

Google Safety & Security
Introducing selfie for sign-in: a new, easy way to access your Google Account

Hunt and Hackett
Attackers do not need to break in, they simply log in

Dark Reading
Brazilian Banking Trojan Actively Spreading in Portugal

TrustedSec
CCPA Update: Who’s In Scope (Part 1)

ISC SANS
ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)

Dark Reading
Ransomware Attack Puts a Chill on Japanese Frozen-Food Chain

Step Security
Find Unused, Stale, and OIDC-Replaceable GitHub Actions Secrets Across Your GitHub Organization

Hacktron
Here’s How an OpenAI Model Went Rogue and Hacked Hugging Face

Elastic Security Labs
How Elasticsearch ES|QL COMPLETION turns noisy curl and wget rules into high-fidelity cloud security alerts

Elastic Security Labs
wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution

Datadog HQ
Provision Datadog on Stripe Projects

Accomplish
SharedRoot; Escaping the Claude Cowork sandbox

Datadog HQ
Efficient multi-provider agent environments with AI gateways: best practices


2026-07-22

Dark Reading
Flaws in Passkey Implementation Show Old Attacks Still Work

Zero Salarium
PE OopsSec: Mind your PE, guard your OPSEC

Aikido
Finding eight high-severity vulnerabilities in NodeBB in six hours

Mend
199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Dark Reading
Attackers Are Learning to Live Off the AI Toolchain

Socket
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign

Dark Reading
Fake Bahrain Alert App Deploys Android Surveillance Malware

ISC SANS
Rondo Meets Geoserver, (Wed, Jul 22nd)

Ars Technica Security
OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face

Microsoft Security
Real world incident response: Microsoft and AXA XL strengthen cyber resilience

Github Security Blog
Next chapter: Restructuring GitHub’s bug bounty program

Dark Reading
When AI Attacks: OpenAI Models Autonomously Hack Hugging Face

Artem Golubin
Domain registration information should be transparent

Aikido
SQL injection isn't dead

SentinelOne
From Triage Grind to Strategic Operator: The New AI SOC Career Path

Wiz
Opening the Black Box: Agentless Threat Detection for Virtual Appliances

Xint
Xint Research: What Type of Security Flaws Does AI Code Produce?

NVISO Labs
Intercepting Android WebView traffic under new certificate validity requirement by Chromium

GitGuardian
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

Black Hills Info Sec
The Life of a SOC Analyst: Responsibilities, Challenges, and Strategies for Success

Searchlight Cyber
Preemptive Threat Exposure Management: Frequently Asked Questions

Eclypsium
Announcing InfraTrust, the source of intelligence on security risks across hardware infrastructure

Eclypsium
Eclypsium Launches InfraTrust to Centralize Enterprise Hardware Security Risks

Rapid7
What’s New in Rapid7 Products and Services: Q2 2026 in Review

Varonis
Dolphin X Stealer Targets 300+ Apps and Profiles Users with AI

Malwarebytes
Chick-fil-A loyalty accounts hijacked using stolen passwords

Searchlight Cyber
July 21st – This Week’s Top Cybersecurity and Dark Web Stories

CISA News
CISA, FBI, EPA and U.S. Government Partners Update Warning of Iran-Affiliated Threat Actors Targeting Critical Infrastructure Programmable Logic Controllers

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Malwarebytes
Paidwork breach exposes data of 23 million users: Check if you’re affected

Dark Reading
EU Financial Institutions Leak Data Through Cookie Trackers

Schneier on Security
First-Person Identity Theft Story

Aikido
The upgrade trap: when upgrading is the wrong answer to a CVE

Eye Security
Beyond the Mythos Hype: What Specialised AI Models Can Do

Socket
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs

ISC SANS
ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)

Krebs on Security
LG to Ban Residential Proxies from Smart TV Apps

Auth0
How to Set Up a Flask App with Cursor and the Auth0 Plugin

Datadog HQ
Unbiased Java CPU profiling with JFR in JDK 25

Datadog HQ
From zero to traces: Choosing the right APM instrumentation method for your stack

Fastly
The Google AI Deal No Publisher Wanted Just Handed Them Something Better: Clarity

Himanshu Anand
Reporter 11: 10 people found the WPForms PayPal bug before me (CVE-2026-4986)


2026-07-21

Dark Reading
Ransomware Is Accelerating, but It's Not Because of AI

Dark Reading
Using LLMs to Find & Prioritize Vulnerabilities Is No Easy Task

Aikido
Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust you