2026-06-24
Step Security
Supply Chain Compromise: codfish/semantic-release-action Tags Hijacked to Steal OIDC Tokens and Propagate Backdoors
MIT Technology Review
Europe’s extreme heat is shutting down power plants
Black Hills Info Sec
Insufficient Egress Filtering: How Weak Outbound Controls Enable Attacks
Microsoft Security
StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them
MIT Technology Review
The Download: introducing the Engineering issue
MIT Technology Review
Stripe, Anthropic, and OpenAI are backing an effort to stop respiratory infections
Dark Reading
Apple's MacOS Gap Lets Users Disable Security Tools
MIT Technology Review
The emergence of the web data infrastructure layer for AI
Schneier on Security
Embedding Forbidden Text in Spyware to Discourage AI Analysis
Searchlight Cyber
June 24th – This Week’s Top Cybersecurity and Dark Web Stories
MIT Technology Review
All challenges big and small
MIT Technology Review
This flying solar-powered platform could deliver better internet from the air
Troy Hunt
Weekly Update 509
2026-06-23
Palo Alto Networks
New Executive Order Accelerates Post-Quantum Readiness Amid the Cryptographic Reset
Ars Technica Security
White House drastically shortens deadline for dropping quantum-vulnerable crypto
MIT Technology Review
Heads in the game
MIT Technology Review
Sharing a love for calculus
MIT Technology Review
A man of many words
MIT Technology Review
Super Mario is mathier than you think
Offensive Security
Intro to STIG Tools
Krebs on Security
Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Mozilla Security
Keeping the Web Open and Private in the Bot Era
Palo Alto Networks
Built to Last: What Stonehenge Teaches us About IT Architecture & Cyber Resilience
Auth0
Does Your Agent Want to See Other People? Identity-Chained Authorization with Auth0 Token Vault.
Dark Reading
SocGholish Takedown Highlights Malicious TDS Threats
Offensive Security
Cybersecurity Training in the Age of AI
Filippo Valsorda
Vulnerability Reports Are Not Special Anymore
Schneier on Security
Anthropic’s Fable 5 Model Jailbroken Within Days
Malwarebytes
GTA 6 early access is nothing but a scam
Google Safety & Security
Expanding financial advertiser verification across Europe
ISC SANS
ISC Stormcast For Tuesday, June 23rd, 2026 https://isc.sans.edu/podcastdetail/9982, (Tue, Jun 23rd)
Rosecurify
Seclog - #183
Elastic Security Labs
From vulnerability report to CVE draft in minutes: how Elastic automated security advisories with AI
2026-06-22
Ars Technica Security
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Microsoft Security
Guarding AI memory
Cloudflare
How we found a bug in the hyper HTTP library
Trail of Bits
Introducing Patch the Planet
Meta Security
Adopting AV1 for Real-Time Communication (RTC) at Scale
Microsoft Security
One intrusion, two cyberattackers: Uncovering parallel threat activity
Searchlight Cyber
How to Measure Continuous Attack Surface Management Success: Essential Metrics That Matter
Wiz
Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows
Schneier on Security
Professional Athletes and Wearables
Malwarebytes
A week in security (June 15 – June 21)
ISC SANS
ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)
2026-06-21
2026-06-19
Schneier on Security
Friday Squid Blogging: Victims of Unregulated Squid Fishing
Kevin Beaumont
An update on FortiBleed — what’s happening with victim orgs
The Citizen Lab
WhatsApp Accuses NSO of Fresh Pegasus Targeting
Jericho
My Quest for the White Squirrel!
Dark Reading
Stressors, AI Forcing Changes to Cybersecurity Teams
Cloudflare
Temporary Cloudflare Accounts for AI agents
Schneier on Security
Anthropic’s Fable and the State of AI
Palo Alto Networks
Expanding Our Footprint: Local Cloud Availability for Prisma AIRS in Japan
Microsoft Security
AutoJack: How a single page can RCE the host running your AI agent
Elastic Security Labs
Lost in relocation: analysis of a new loader distributing CASTLESTEALER
Elastic Security Labs
Azure AD Graph Activity Logs: Ingestion and threat detection to close the visibility gap
2026-06-18
Ars Technica Security
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Palo Alto Networks
The Invisible CEO of Crisis: Breaking the Cycle of CISO Burnout
Ars Technica Security
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
Microsoft Security
New Forrester Total Economic Impact™ study projects a 124% ROI from unifying with Microsoft Security
Amazon Security
Accelerate security investigations with Kiro CLI
Talos Intelligence
Close Encounters of the Human Kind
Cloudflare
Build your own vulnerability harness
Krebs on Security
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
Cloudflare
Celebrating 12 years of Project Galileo
Eclypsium
Securing the Foundation: What the New White House AI Executive Order Means for Federal Cybersecurity
Bishop Fox Security
Shynet | VERSION 0.13.1
Schneier on Security
Embedding Forbidden Text in Spyware to Discourage AI Analysis
Step Security
Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
Step Security
400+ AUR Packages Hijacked: What the “Atomic Arch” Campaign Means for Supply-Chain Security
Step Security
Prevent npm and Python Supply Chain Attacks on Developer Machines with Package Configs
Talos Intelligence
Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model
Searchlight Cyber
Three Days to Patch: What CISA’s New Directive Says About the Pace of Modern Exploitation
TrustedSec
Modern Web Application Content Discovery
Microsoft Security
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
ISC SANS
ISC Stormcast For Thursday, June 18th, 2026 https://isc.sans.edu/podcastdetail/9978, (Thu, Jun 18th)
Bishop Fox Security
The Smash-and-Grab Era
Fastly
Deploying Fastly's Next-Gen WAF with Google Cloud Service Extensions to Help Secure Traffic at Scale
2026-06-17
Ars Technica Security
Massive breach spills credentials for thousands of sensitive networks
Dark Reading
INC Ransomware Thrives by Mastering the Basics
Microsoft Security
Beyond the benchmark: Advancing security at AI speed
Microsoft Security
Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report
Ars Technica Security
"Dangerous" AI models are coming no matter what
Microsoft Security
AI is accelerating cyberattacks—here’s how to stay ahead