2026-10-29
2026-10-28
Talos Intelligence
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
MIT Technology Review
Creating AI value with enterprise context
Black Hills Info Sec
John Strand's 11 Core Skills: For SOC Analysts
Silverfort
Weaponize your identity debt: Identity Security, decoys, and tripwires in the age of AI attacks
Meta Security
Meta Andromeda: Powering the Next Generation of Ads Retrieval Through Model-System Co-Design
GitGuardian
Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First
Hybrid Analysis Blog
SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks
Malwarebytes
Banks are blocking AI agents from customer accounts
MIT Technology Review
The Download: dead startups fueling AI and interspecies communication
MIT Technology Review
Pairing industrial AI autonomy and human control
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Schneier on Security
Studying Fraudulent North Korean IT Workers
2026-10-27
Ars Technica Security
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Amazon Security
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
Socket
Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets
Amazon Security
Part 3 – Cybersecurity journeys: The work behind the work
The Citizen Lab
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
Meta Security
PrivacyLib: Privacy Controls at the Data Access Boundary
ReversingLabs
Researchers Break Into Anthropic’s Systems in Just 12 Hours—Through Third-Party Software
Malwarebytes
Five election scams to watch out for
Step Security
StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines
PortSwigger
Scalable Vector Grief
Cloudflare
What took the Internet offline in Q3 2026
Bishop Fox Security
Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
Malwarebytes
Artificial Intimacy: Love and lies in the age of AI
MIT Technology Review
The Download: Anthropic’s IPO, smarter power grids, and exercise pills
CISA Alerts & Advisories
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
CISA Alerts & Advisories
EPICS Base
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
MIT Technology Review
Industrial Intelligence: The next growth opportunity for manufacturing
Escape DAST
Escape research found an auth bypass in Ghost that can wipe all member's votes. It's now CVE-2026-103288.
Schneier on Security
Hiding Capabilities in AI Models
Talos Intelligence
From federal SOCs to Talos: Ryan Fetterman on practical security research
MIT Technology Review
How solid-state transformers could help power the AI boom
TrustedSec
What is CUI? A Contractor’s Perspective
2026-10-26
Doyensec
ElectroNG is now open source!
Cloudflare
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
MIT Technology Review
Will the real Anthropic please stand up
Meta Security
Meta Networking at the 2026 OCP Global Summit: Open Innovation for Scale-Up, Scale-Out, and Scale-Across AI Networks
Palo Alto Networks
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management
Step Security
litellm 1.107.0 Compromised on PyPI and Docker: Credential Stealer and Hourly Remote Code Loader
Malwarebytes
AI Halloween videos: Who’s getting your photos?
MIT Technology Review
The Download: everyday AI harms and the race to nuclear spaceflight
CISA News
CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Schneier on Security
Bias in Qwen3-Coder Model
MIT Technology Review
The focus on AI safety disasters ignores everyday harms
Malwarebytes
A week in security (October 19 – October 25)
Rosecurify
Seclog - #201
Sansec Threat Research
Notorious Brazilian Magecart group hijacks Convertr checkouts via outdated Plausible install
Elastic Security Labs
Kernel eviction notice: What wesp.sys reveals about the Windows Endpoint Security Platform
2026-10-25
2026-10-24
Step Security
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
Sansec Threat Research
deepveindrilling.com: Magento CMS block loader hits 953 stores
2026-10-23
Schneier on Security
Friday Squid Blogging: Increasing Squid Populations
Ars Technica Security
Knicks sent employees fake offer of championship rings in phishing test: Report
Palo Alto Networks
Palo Alto Networks Brings Continuous AI Defense and Prisma AIRS to the OpenAI Marketplace
The Citizen Lab
Built-In Weakness: Lawful Access and Encryption in the Age of AI-Powered Cyber Threats
NVISO Labs
PHP2Shell Operational Guidance
Dark Reading
Why Caribbean Threats Cascade Into Global Cyber-Risk
MIT Technology Review
The Download: testing six tech promises and biotech’s blind spots
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Schneier on Security
Compromised TLS Certificates
DarkRelay
OWASP Top 10 Penetration Testing
Dark Reading
State Bank of India Suffers a Customer PII Data Leak
Okta Security
Node2Shell: Node.js Brotli flaw (CVE-2026-111497)
Elastic Security Labs
How CVE-2026-73570 turns a Zimbra log file into remote code execution
2026-10-22
Dark Reading
What We Missed: Feds Lasso Texas Laptop Farms
Ars Technica Security
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Black Hills Info Sec
Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys
Talos Intelligence
I had plans for that second
Github Security Blog
How bug bounty sharpens one researcher’s security skills
The Citizen Lab
How Generative AI is Scaling Transnational Repression
Ars Technica Security
Hackers got a four-day head start on epic PHP2Shell vulnerability
Malwarebytes
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
Schneier on Security
New Serious PHP Vulnerabilities Released and Patched
Bishop Fox Security
The True Blast Radius of an AI Attack
CISA Alerts & Advisories
Siemens Software Center
CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW
CISA Alerts & Advisories
Siemens SIMATIC IPCs
CISA Alerts & Advisories
Siemens Industrial Edge Devices
CISA Alerts & Advisories
Siemens SIMATIC S7-1500 TM MFP
CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808 Devices
CISA Alerts & Advisories
Siemens Capital Embedded AR Classic
CISA Alerts & Advisories
Siemens Industrial Edge Device Kit
CISA Alerts & Advisories
Siemens WinCC
CISA Alerts & Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
CISA Alerts & Advisories
Siemens Industrial Edge App Publisher
CISA Alerts & Advisories
Siemens SIMATIC S7 Webserver API
CISA Alerts & Advisories
Managing AI Token Consumption for Operational Resilience
CISA Alerts & Advisories
Kiloview E3 NDI Encoder
CISA Alerts & Advisories
Siemens APOGEE, TALON and Desigo PXC/PXM Products
CISA Alerts & Advisories
InterSystems Corporation InterSystems IRIS for Health
CISA Alerts & Advisories
Siemens PSS(R)SINCAL
CISA Alerts & Advisories
Siemens SENTRON 3NA COM Fuse
CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW Station Access Controller
CISA Alerts & Advisories
Siemens SIMATIC S7 PLCs Web Server
Ars Technica Security
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Escape DAST
php2shell (CVE-2026-109618 + CVE-2026-109619): unauthenticated RCE in PHP core, now detected by Escape