219 Security Blogs

Last Updated: 25 Sep 26 19:01 UTC

Blog List | Github | OPML

2026-09-25

Dark Reading
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

Dark Reading
What We Missed: Google Gemini Joins the AI Escape Party

Microsoft Security
Storm-3168: Agentic-driven cloud attacks using compromised service principals

Malwarebytes
LinkedIn adds new checks for fake profiles and work histories

Eye Security Research
Rise of the Jev-Clones

GitGuardian
AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP

Malwarebytes
Kothamine malware uses Tailscale’s tailcat to evade network detection 

Dark Reading
Stopping IT Worker Scams Requires Revamped HR Process

Rapid7
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

Silverfort
Silverfort integrates with Anthropic to turn Claude activity into identity context

Cloudflare
Agents can now set up your website’s security with Turnstile Spin

Bishop Fox Security
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326

ISC SANS
A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)

Malwarebytes
Criminals turn placeholder domain into ClickFix trap

MIT Technology Review
The Download: the Pentagon’s AI-powered lie detector and young organ limits

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Schneier on Security
On Anthropic’s AI Misuse Report

Trail of Bits
Don't let TEEs break your MPC

Malwarebytes
That shipping rebate offer may come with a monthly charge

MIT Technology Review
The Pentagon wants $30 million to build an AI-powered lie detector

MIT Technology Review
Young organs may not be a fountain of youth for recipients

Dark Reading
Russia's Hybrid Cyber-Physical War in Europe Heats Up

ISC SANS
ISC Stormcast For Friday, September 25th, 2026 https://isc.sans.edu/podcastdetail/10110, (Fri, Sep 25th)

Moonlock
Fake Zoom and Slack downloads are spreading the new Sonoma stealer

Moonlock
Is CCSPayment a scam or legit? What CCS Offices notices really mean

Auth0
Stop Building MFA from Scratch (And What to Do Instead)

Semgrep
What Application Security Actually Does All Day

Datadog HQ
Extend Datadog RUM and Product Analytics to Shopify and Salesforce

Teleport Blog
How to Eliminate Shared Production Kubeconfigs


2026-09-24

Socket
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud

Dark Reading
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

Dark Reading
SectopRAT Returns, Hiding Inside a Legitimate Application

Aikido
Top CodeQL alternatives in 2026

Github Security Blog
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

Red Siege InfoSec Blog
Red Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect

Talos Intelligence
Trust and the enticing consultancy offer

Wiz
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026

Microsoft Security
​​​​​​​​What’s new in Microsoft Security: September 2026​​

Microsoft Security
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Silverfort
Replicating part of the OpenAI attack on Hugging Face

GitGuardian
How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding

Cloudflare
How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers

Dark Reading
3 Cyber Threats That Defined the Summer of 2026

Dark Reading
How to Build a SASE Framework for Modern Cybersecurity

Dark Reading
Ghost Service Accounts Enable M365 Data Theft in Chile

Malwarebytes
OpenAI agent breached Australian government site, took months to report it

Wiz
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure

Bishop Fox Security
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications

Rapid7
When Business Email Compromise Starts Rewriting Reality

Dark Reading
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

Malwarebytes
New Browser Guard features add protection before and after you click

MIT Technology Review
The Download: a bid to scrap the virtual wall and AI hits Climate Week

XBOW
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Siemens Mendix Runtime (Update A)

CISA Alerts & Advisories
Botslab G980H Dashcams

CISA Alerts & Advisories
Eufy Omni C20, Omni X10 Pro

Ars Technica Security
There's a new way to break RSA that's faster than anything we've seen before

Schneier on Security
Malicious npm Packages That Evade Defenses

Malwarebytes
Update Chrome: 108 security fixes for desktop, new release for Android

MIT Technology Review
AI is dominating the conversation at Climate Week

Ali Yazdani
The Security Engineer's Survival Kit for the AI Era

Malwarebytes
Google’s location data privacy failures draw a €403 million fine

ISC SANS
One URL, Three Different Tricks, (Thu, Sep 24th)

Snyk
Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface

TrustedSec
What's New in hate_crack Since 2.0

ISC SANS
ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th)

Moonlock
Guests, hosts, and the Airbnb scams that target both

Project Black
Bypassing EDR with Local AI

Project Black
Bypassing EDR with Local AI

Paultendo
Testing RaySpace against the letters we already know

Infernux Blog
Major data lake changes in Microsoft Sentinel September 2026 Update

Meta Security
Bringing Private Processing to Meta AI Glasses

Semgrep
Introducing Malware Detection and Response Automation

Datadog HQ
Using TypeSafe’s Jev for evals in Datadog Agent Observability

Accomplish
Escaping the Cloudflare sandbox

Paultendo
tothepenny: bank statements that have to add up

Star Labs
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE

Star Labs
How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail


2026-09-23

watchTowr Labs
Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

Amazon Security
ICYMI: August 2026 @AWS Security

Dark Reading
SASE Converges Network & Security Into One Cloud Solution

Doyensec
One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts

Ars Technica Security
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real

Socket
Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts

Dark Reading
EDR Evasion Stack Helps Process Injection Slip Past Defenses

Dark Reading
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

XPN's Blog
Experimenting with Jev for Offensive Security

Zero Day Initiative
CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer

Malwarebytes
How device code phishing gives scammers access to your account

MIT Technology Review
A congressional representative just proposed killing America’s border tower program

ISC SANS
Macfinger ClickFix campaign, (Tue, Sep 22nd)

Praetorian
Hannibal Puts Autonomous Penetration Testing Under Your Control

Aikido
Top Greptile alternatives in 2026

Dark Reading
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks

Microsoft Security
Reimagining the SOC for the agentic era in Microsoft Defender

ReversingLabs
AI changes cyber spending — but where’s the line-item for tokens?

Dark Reading
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign

Amazon Security
Supporting ASD’s multi-factor authentication campaign: Why MFA matters more than ever

Step Security
Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes

PortSwigger
HTTP/3 in Burp Suite - it’s time to find a bigger wordlist

Rapid7
How dynamic application security testing validates risk at runtime

Aikido
Aikido and Deel: set up once, secure every hire

Malwarebytes
Fake Claude Max giveaway hides a Google account phishing trap

Eye Security Research
AI vulnerability discovery using the Kitten process: How we found CVE-2026-75754

MIT Technology Review
The Download: India’s smart glasses menace and AI’s trillion-dollar gamble

Malwarebytes
ShinyHunters claims FBI breach was revenge for “false” report

CISA Alerts & Advisories
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators

CISA News
CISA Whitepaper Charts Path to Establishing and Maturing CVE Program Quality

Schneier on Security
Research on Models Engaging in Genie-Like Behavior

Socket
MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack

MIT Technology Review
The AI Hype Index: AI loves cheating

MIT Technology Review
Smart glasses are already causing havoc in India

Rapid7
CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

Aikido
Novel supplychain.local Go worm appears

Voidstar Security Research Blog
Extending Scapy for Hardware Reverse Engineering

Aikido
Send GitLab an email, push to main

DarkRelay
Windows Driver Fuzzing with WinAFL: Theory to Practice

Troy Hunt
Weekly Update 522: Live From Oslo with Scott Helme

Elttam
ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE - elttam

Arch Cloud Labs
Testing BTRFS w/ Release Candidate Kernels on Arch Linux

ISC SANS
ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd)

Aikido
Cyber Resilience Act is here! Myth busting and first impressions

Mehmet Ince
Part 2/6 | Breaking the Postgres Superuser Guardrails: Attacking Security-Hardening Extensions |Systemic Risks in the Managed PostgreSQL Industry

Semgrep
The AI Ecosystem Has Worms Now: Inside the MemTensor Compromise

Datadog HQ
Configure RUM SDKs remotely from Datadog

Datadog HQ
Find answers in your logs faster with Datadog’s Tap to Parse

Infernux Blog
What is the Integrated Security Operations Center (ISOC) for Defender XDR?

Datadog HQ
Teaching a 9B model to investigate production alerts


2026-09-22

Dark Reading
Relays Are Masking Chinese Access to Frontier AI Models in the US

Dark Reading
How the CISO-CMO Alliance Builds Trust Before Crisis Strikes

Dark Reading
Microsoft Disrupts EvilTokens Device Code Phishing Service

Dark Reading
Deception by Design: CISA's Guide to Tricking Cybercriminals

Ars Technica Security
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts

ISC SANS
The Truth about GET and HTTP Standards, (Tue, Sep 22nd)

Dark Reading
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real

The Citizen Lab
UN Reports Citing Citizen Lab Submissions Published

The Citizen Lab
Submission to the Immigration and Refugee Board of Canada

Malwarebytes
Some cheap smart glasses are a security disaster

Microsoft Security
Unmasking EvilTokens: Getting to the root of device code phishing

ReversingLabs
Malicious npm campaign targets developers integrating Twilio

Xint
It Wasn't the AI ​​Model That Was Breached | A Summary of 5 Recent AI Agent Vulnerabilities and Incidents

Cloudflare
We just shipped support for the ugliest part of HTTP: Vary

MIT Technology Review
Roundtables: The Deadly Failures of The Virtual Border Wall

ISC SANS
LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)

GitGuardian
GitHub App Private Keys: 474 Leaked Keys Exposed

Cloudflare
Introducing Worker Previews: Isolated preview environments for every change your agent makes

Aikido
Graphalgo campaign spreads to Terraform providers and Go Modules

Wiz
Growing the WIN AI Ecosystem with Agent Integrations

CISA Alerts & Advisories
Siemens WTV676 and WTV776

CISA Alerts & Advisories
Siemens Siveillance Control

CISA Alerts & Advisories
Siemens SIPLUS and SIMATIC Products

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
lwIP TCP/IP Stack MQTT Client Application

CISA Alerts & Advisories
Siemens Desigo CC family

CISA Alerts & Advisories
lwIP (Lightweight IP)

CISA Alerts & Advisories
Siemens SIMOVE Fleetmanager and SIPLANT

CISA Alerts & Advisories
Siemens Industrial Edge Management

CISA Alerts & Advisories
OpenPLC Runtime v3

Dark Reading
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds

Palo Alto Networks
Introducing Unit 42 Continuous Frontier AI Defense

Schneier on Security
GPT-6 Astra Breaks an Old Enigma Message

Malwarebytes
Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Dark Reading
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

Talos Intelligence
The Closed Quorum: Inside the first reported autonomous AI C2 implant

Talos Intelligence
Introducing CAIRN: Frontier tracking for AI-integrated malware

Malwarebytes
Researchers used Claude to hack OpenAI

Socket
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source

Snyk
So I asked my agent instead…

Project Black
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?

Project Black
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?

ISC SANS
ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)

Datadog HQ
Cut AI agent cost and improve accuracy with Code Execution in the Datadog MCP Server

Datadog HQ
When users don’t click thumbs up: Inferring agent feedback from Datadog telemetry

Yunus Aydın
CVE-2024-27763: SLURM_NODELIST üzerinden BasicSR komut enjeksiyonu

Yunus Aydın
CVE-2024-27763: Command injection in BasicSR via SLURM_NODELIST

Auth0
Confused Deputy: The Old Bug That AI Agents Keep Reintroducing


2026-09-21

Ars Technica Security
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

Jericho
Review: TajMo: Room On The Porch Tour

Dark Reading
How AI Agents Can Trigger Runaway Costs for Enterprises

Dark Reading
ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?

Dark Reading
Cybercriminals Are Hiding New Malware in Torrents for Popular Films

XBOW
Grok 4.7 Is Different. So Is the Best Way to Use It.

Malwarebytes
The AI plot to scan and destroy books (Lock and Code S07E19)

Meta Security
Open-Sourcing Rebalancer: A Generic, High-Performance Library for Solving Assignment Problems

Malwarebytes
The fake sites using a cheap toolkit to sell $2,000 AI subscriptions

Amazon Security
Transforming Bedrock Guardrails events into OCSF with CloudWatch

Dark Reading
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents

Schneier on Security
Reverse-Engineering Flock Cameras

Malwarebytes
Gemini’s breach of real companies exposes an AI guardrail problem

Silverfort
Runtime is where AI Agent Security gets real. New research unpacks the ARISE Framework.

Offensive Security
10 Lessons Reshaping Security After Black Hat and DEF CON 2026

Aikido
Introducing Aikido Altar: the model that makes sovereign security intelligence possible

Cloudflare
Python Workers are now generally available

Meta Security
Inside Petal: Building the World’s First Petabit-Class Transoceanic Subsea Cable

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Trail of Bits
SAML: A fractal of bad design

core-jmp
Windows Internals: Check Your Privilege — The Curious Case of ETW’s SecurityTrace Flag

ISC SANS
TerminalFix: PNG Steganography, (Mon, Sep 21st)

core-jmp
Disposable Tooling: Building LLM-Generated Mythic Agents from Prompt to Deployment

core-jmp
A Quartet of Linux Local Root Vulns: DirtyAH6, TUNderflow, PPPoEject, and DiagSpill

Malwarebytes
ShinyHunters hacks rival extortion gang and takes over its dark web site

Malwarebytes
A week in security (September 14 – September 20)

Greynoise
Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation

Auth0
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Human-in-the-Loop Approval

Datadog HQ
Understand the top paths users take to convert or drop off with Journey Paths

Fastly
AI Feeling Out of Control? Govern, Protect, and Control Every Request with Fastly

Rosecurify
Seclog - #196

Elastic Security Labs
Cloud Threat Emulation on Autopilot: Context is Everything


2026-09-20

Artem Golubin
Real attackers don't think in bug bounty scopes

Buchodi
ChatGPT now knows what you do on other websites via ad collector

Ars Technica Security
An undercover Google analyst infiltrated a notorious supply-chain hacking gang

MaskRay's Blog
Linker I/O tricks and their downsides

Fastly
Introducing Fastly’s AI Runtime Control: Why Your AI Strategy Needs a Control Plane

Fastly
Knowledge Is Power: Control AI Bot Scraping with Fastly Bot Management


2026-09-19

DarkRelay
FTP and SSH Enumeration for Pentesting (Ports 21, 22)

Joshua Rogers
Being silly is the whole point

Accomplish
Guest to host: escaping Docker's hypervisor


2026-09-18

Schneier on Security
Friday Squid Blogging: On Squid Egg Sacs

Dark Reading
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks

Eclypsium
Eclypsium Infrastructure Assurance Platform

Dark Reading
Cisco Zero-Day Highlights API Endpoint Authentication Issues

Dark Reading
EY Survey Finds Autonomous AI Implementation Outpaces Oversight