219 Security Blogs

Last Updated: 03 Sep 26 04:15 UTC

Blog List | Github | OPML

2026-11-12

Dark Reading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI


2026-10-08

Dark Reading
[Virtual Event] Building a Secure AI Strategy for the Enterprise


2026-09-03

ISC SANS
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)

ISC SANS
ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)


2026-09-02

Microsoft Security
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Dark Reading
AI’s Vulnerability Surge May Be More Manageable Than First Feared

Dark Reading
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

Amazon Security
Managing identity source transition for AWS IAM Identity Center

Ars Technica Security
I rented a car, and within hours, my driver's license was for sale

Dark Reading
AI Gives Cybercriminals a Dangerous Time Advantage

Amazon Security
Agentic security: Detection and response at machine speed

Schneier on Security
AI Agents Are Now Emailing Me with Their Security Concerns

Rapid7
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Dark Reading
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users

Google Safety & Security
Our latest Linux Foundation Europe donation will build a more private digital world.

Malwarebytes
Tech support scams look different now. Here’s what to watch for

Eclypsium
Cybersecurity Insiders: AI Infrastructure’s Firmware Problem Is Bigger Than Any Single Vendor

Offensive Security
What If Your Idea Became the Next OffSec Lab?

Google Safety & Security
Proactive cyber defense for governments and enterprises

Jericho
Lazy Movie Headlines Are Lazy

GitGuardian
OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

Palo Alto Networks
Building Securely From Day One: Palo Alto Networks Partners with the Zendesk Startup Program

The Citizen Lab
U.K. Supreme Court Opens Door for Spyware Victims to Sue Foreign States

Xint
Finding Bugs Isn’t Enough: The Difference Between Pointing LLMs to Find Bugs and a Mature AI AppSec Platform

MIT Technology Review
Facilitating AI integration with simplicity at scale

core-jmp
Privilege Escalation from IIS AppPool to NT Authority/SYSTEM via AD CS RPC Endpoint

Malwarebytes
Scammers are getting smarter about where they target you 

MIT Technology Review
The Download: AI puzzles and a path to our nearest star system

CISA Alerts & Advisories
CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Communicating Under Pressure: Best Practices for Service Providers

XBOW
Engineering the Impossible: How XBOW De-Duplicates Findings

core-jmp
CATAnA: Exploring the Dangers of SIM-Originating AT Commands in Cellular Devices

core-jmp
Proxmox VE 7.0–8.0.3: Unauthenticated Single-Request Root Auth Bypass (CVE-2023-54391)

Malwarebytes
Two critical Chrome flaws put users at risk on malicious websites

core-jmp
Singularity Rootkit: Evading Elastic Defend Module Load Detection

Ars Technica Security
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

Schneier on Security
Wireless Routers as Motion Detectors

Step Security
Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners

Step Security
Introducing deny list egress policies for Harden-Runner

Malwarebytes
153M+ driver’s licenses for sale on new dark web platform

Malwarebytes
Your AI chats could be used in court

Meta Security
An Organizational Second Brain: Building an AI That Learns From Experts

ISC SANS
ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)

Dark Reading
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Datadog HQ
Monitor prompt caching to optimize your token usage


2026-09-01

Microsoft Security
Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Krebs on Security
FBI Probes Service Selling 153M+ Drivers Licenses

Troy Hunt
Weekly Update 519: Breaches & Data Integrity

ISC SANS
Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st)

Dark Reading
Attackers Pounce on Critical Artifactory Bug Following Disclosure

Dark Reading
Stronger Security Drives Ransomware Groups to Recruit From Within

Dark Reading
Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise

Dark Reading
AI Model Evaluator METR Hit by Credential Theft, Probing

Palo Alto Networks
Making the Most of the Cloud Marketplace Opportunity

MIT Technology Review
How AI plotted an interstellar journey to Alpha Centauri

Microsoft Security
Cybersecurity IR Workshop: The workshop you shouldn’t miss

Socket
Microsoft Teams Notifications Are Now Available in Socket

Schneier on Security
What’s the Scam?

Aikido
Top DSPM tools in 2026

Schneier on Security
Leaked Russian Cyber-Operations Training Materials

Malwarebytes
Fake GTA 6 leaked copy drains your crypto wallet

Jericho
Odds Are You Are Responsible for that Traffic Slowdown

GitGuardian
Credential Security: What Endpoint Protection Really Means for Secrets

Aikido
The dark figure of supply chain detection

MIT Technology Review
Making the AI-powered case for legacy modernization

Dark Reading
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain

ToxSec
Security Through Obscurity Is Running Out of Time

Cloudflare
How we could save petabytes of cache storage with Zstandard and Pingora

Malwarebytes
TerminalFix looks like ClickFix, but delivers a very different payload

MIT Technology Review
The Download: engineered microbes for crops, and OpenAI’s culture problem

CISA Alerts & Advisories
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix

CISA Alerts & Advisories
Rockwell Automation FactoryTalk Activation Manager

CISA Alerts & Advisories
Rockwell Automation Redundancy Module Configuration Tool

CISA Alerts & Advisories
Rockwell Automation Logix Platform

CISA Alerts & Advisories
Rockwell Automation Historian ME

CISA Alerts & Advisories
Rockwell Automation RSLinx Classic

Wiz
Introducing Continuous Vulnerability Assessment: Real-Time Defense for the AI Threat Era

Malwarebytes
Infostealers are hijacking Claude accounts at users’ expense

Schneier on Security
Rewiring Democracy Series on The Renovator

MIT Technology Review
How engineered microbes could help feed the world’s crops

clearbluejar's Blog
Don't Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models

TrustedSec
waf-fu, or Some Log Replay Nonsense

Socket
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%

ISC SANS
ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st)

Datadog HQ
Visualize how CUPED adjusts experiment results with Datadog

Datadog HQ
From traces to experiments: A loop for improving AI agents

Datadog HQ
Making Rust observability reliable at scale with OpenTelemetry

Fastly
Preserving Analytics Attribution During Bot Challenges: A Fastly VCL & NGWAF Deep Dive

Rosecurify
Seclog - #193

Nebula Security
Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu

Auth0
How to Make Your AI Agent Enterprise-Ready: Enabling Enterprise-Managed Authorization for Client Apps in Auth0


2026-08-31

Dark Reading
Anthropic Users Hit by Infostealer Attacks, Session Thefts

Socket
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat

Dark Reading
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks

Dark Reading
The Guardrails Debate: Security Researcher Changes His Mind

Hybrid Analysis Blog
Hybrid Analysis, Reengineered

ISC SANS
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)

Amazon Security
We invited a direct competitor into Security Hub Extended. Here’s why.

Schneier on Security
Is Someone Hacking DoD Refrigerators?

MIT Technology Review
The Hugging Face hack could indicate cultural issues at OpenAI

Dark Reading
AI Model Rules Are Not Security Controls

Auth0
Securing Agentic Commerce

Amazon Security
Automate IAM Identity Center governance with continuous discovery and reporting

Ars Technica Security
Think twice before installing this device promising free movies

Include Security
EncryptedSharedPreferences is Dead: Here’s What You Should Use Instead

Jericho
How Much Lipstick Can That CVE Pig Wear?

GitGuardian
AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

Malwarebytes
McKesson confirms cyber incident after ShinyHunters claims patient-data theft

Socket
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds

Bishop Fox Security
Traefik | Version Through 3.7.11

Cloudflare
Introducing Adaptive Intelligence: Undermining the economics of every bot attack

XBOW
How to Run an AI Application Pentesting Vendor RFP: The Evaluation Framework that actually works

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Schneier on Security
Hiding Prompt Injection in Legal Filing

Malwarebytes
A week in security (August 24 – August 30)

Moonlock
8 common Fiverr scams: What they look like and how to avoid them

Moonlock
AnyDesk scams: How fraudsters turn legitimate software into a scam

ISC SANS
ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st)

Greynoise
GreyNoise + CrowdStrike: Real-Time Edge Intelligence in Falcon Next-Gen SIEM and Charlotte Agentic SOAR

Auth0
Type-Safe Authentication in Rust with Auth0 and Axum

Fastly
Instantly AI-Agent-Ready with WebMCP on Demand

Datadog HQ
Troubleshoot and secure your code faster with Datadog’s Bitbucket Cloud Source Code integration

Datadog HQ
Respond to security threats faster with Tines and Observability Pipelines

Datadog HQ
How Bits Database Optimization proves a query rewrite is faster

Semgrep
Feeling the heat from Malicious Packages? Cool off with Cooldowns

Fastly
Why SaaS and PaaS Infrastructure Leaders Are Facing 22% More Unwanted Bots


2026-08-30

ISC SANS
YARA-X 1.20.0 Release, (Sun, Aug 30th)


2026-08-29

Mend
Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions

Microsoft Security
TerminalFix campaign deploys a reverse tunnel through multistage intrusion


2026-08-28

Step Security
@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow

Step Security
Dev Machine Guard Now Inventories Browser Extensions on Developer Machines

Step Security
Dev Machine Guard Now Inventories Where Developer Credentials Live

Aikido
Popular code generator for TanStack Query hit by supply chain worm

Schneier on Security
Friday Squid Blogging: Truckload of Squid Spills in Rhode Island

Socket
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack

Aikido
Securing Docker images

Dark Reading
Hundreds of OpenAI Agents Invaded Hugging Face Servers

Amazon Security
Extend your data perimeter to the AWS Management Console with Private Access

Dark Reading
Offensive Security Investments Surge as AI Threats Increase

Socket
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 35

Rapid7
Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

Dark Reading
You Need Cyber Deception for OT

Malwarebytes
Protect your WhatsApp account with new passkey and 2FA upgrades

Dark Reading
Defining an AI Kill Switch Is Hard, but Necessary

Socket
Socket Now Protects the Microsoft Edge Extension Ecosystem

Dark Reading
The Vulnpocalypse Is Repricing the Bug Bounty Economy

Cloudflare
BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents

MIT Technology Review
The Download: a secretive antiaging drug and joining virtual power plants

core-jmp
Process ID Mutation via BYOVD: Evading Sysmon Telemetry Through Kernel Exploitation

Malwarebytes
The AI agent swarm that attacked Hugging Face is a warning for the future

Ars Technica Security
Authorities arrest 2 alleged members of prolific hacking group TeamPCP

Schneier on Security
AI Doesn’t Mean the End of Mathematics—at Least Not Yet

Rapid7
PaperCut NG/MF Critical Zero-Day Exploited in the Wild

MIT Technology Review
How to sign up for a virtual power plant—and decide whether you should

core-jmp
I Found a KVM Guest-to-Host Heap Corruption Bug and Someone Else Got There First

ISC SANS
Some Malicious PE Stats, (Thu, Aug 27th)

ISC SANS
ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th)

Datadog HQ
Reduce sensitive data exposure with build-time allowlists

Greynoise
Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets


2026-08-27

Naveen Srinivasan
BPF Token Delegation

MIT Technology Review
A startup claims it’s found a drug to make your blood young

Dark Reading
Chinese Routers Sold Worldwide Contain Backdoors

Talos Intelligence
“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

Dark Reading
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026

Cloudflare
How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Wiz
Inside 90 days of attacks on AI infrastructure

Amazon Security
Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK

Boschko Security Blog
UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range

Socket
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads

Microsoft Security
​​​​​​What’s new in Microsoft Security: August 2026

Github Security Blog
OpenClaw went viral. Meet the maintainers building and securing it.

Wiz
From Concept to Context Engine: How Wiz Built AI-Powered Data Discovery

Malwarebytes
Flock wants privacy to meet surveillance halfway

GitGuardian
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

Malwarebytes
Fake listings can turn trusted platforms into scam springboards

XBOW
Continuous Attack Surface Testing vs Penetration Testing: Key Differences

Ars Technica Security
Claude, Codex, and Hermes installed unowned code inside corporate networks

Rapid7
Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs

Ars Technica Security
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face

Malwarebytes
Fake Apple Pay charge brings the classic tech support scam to your phone

CISA Alerts & Advisories
Xiiaozet LK100W

CISA Alerts & Advisories
Ebyte NA111-M

CISA Alerts & Advisories
Rockwell Automation OTTO Fleet Manager

CISA Alerts & Advisories
Applied Systems Engineering ASE2000 V2 Communications Test Set

CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Mitsubishi Electric Multiple FA Products (Update D)

Wiz
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps

CISA Alerts & Advisories
Mitsubishi Electric CNC Series (Update A)

CISA Alerts & Advisories
All-Line Equipment Company Fuel-Boss

Aikido
Good riddance, TeamPCP. Now for the hard part.

Dark Reading
Russian Hackers Phish EU Officials Over Messaging Apps

Krebs on Security
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Malwarebytes
New Instagram and Facebook rules set a default two-hour limit for teens

Talos Intelligence
JavaScript obfuscation: From party trick to phishing kit

Schneier on Security
LLM-Based Social Engineering Scams

core-jmp
SLEEPWALKER: A Passive Backdoor With Its Own Command Language

core-jmp
Two Bytes to RCE: Chaining nginx rift and PoolSlip into an ASLR-Independent Exploit