2026-10-23
DarkRelay
OWASP Top 10 Penetration Testing
Dark Reading
State Bank of India Suffers a Customer PII Data Leak
2026-10-22
MIT Technology Review
Designing an AI serving harness built to last
Dark Reading
What We Missed: Feds Lasso Texas Laptop Farms
Ars Technica Security
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Black Hills Info Sec
Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys
MIT Technology Review
The Foundations of Scalable AI
Talos Intelligence
I had plans for that second
Github Security Blog
How bug bounty sharpens one researcher’s security skills
The Citizen Lab
How Generative AI is Scaling Transnational Repression
Ars Technica Security
Hackers got a four-day head start on epic PHP2Shell vulnerability
Malwarebytes
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
Schneier on Security
New Serious PHP Vulnerabilities Released and Patched
Bishop Fox Security
The True Blast Radius of an AI Attack
Eye Security Research
PHP2Shell: Our assessment of the risk for systems running PHP
MIT Technology Review
The Download: computing’s next leap and permafrost’s climate threat
CISA Alerts & Advisories
Siemens Industrial Edge Devices
CISA Alerts & Advisories
Siemens SIMATIC S7 PLCs Web Server
CISA Alerts & Advisories
Siemens WinCC
CISA Alerts & Advisories
Siemens Industrial Edge Device Kit
CISA Alerts & Advisories
Siemens Capital Embedded AR Classic
CISA Alerts & Advisories
InterSystems Corporation InterSystems IRIS for Health
CISA Alerts & Advisories
Siemens PSS(R)SINCAL
CISA Alerts & Advisories
Siemens Software Center
CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW Station Access Controller
CISA Alerts & Advisories
Siemens SIMATIC IPCs
CISA Alerts & Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
CISA Alerts & Advisories
Siemens SIMATIC S7 Webserver API
CISA Alerts & Advisories
Siemens SENTRON 3NA COM Fuse
CISA Alerts & Advisories
Managing AI Token Consumption for Operational Resilience
CISA Alerts & Advisories
Siemens SIMATIC S7-1500 TM MFP
CISA Alerts & Advisories
Kiloview E3 NDI Encoder
CISA Alerts & Advisories
Siemens APOGEE, TALON and Desigo PXC/PXM Products
CISA Alerts & Advisories
Siemens Industrial Edge App Publisher
CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW
CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808 Devices
Ars Technica Security
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Eye Security Research
Operation IXIM: Preventing a botnet of millions of Popcorn Time users
Step Security
litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
MIT Technology Review
Making the case for context-aware AI
MIT Technology Review
Three things you should know about permafrost
Escape DAST
php2shell (CVE-2026-109618 + CVE-2026-109619): unauthenticated RCE in PHP core, now detected by Escape
MIT Technology Review
AI’s hidden storage bill: What inference leaves behind
Dark Reading
UAE Transitions 50% of Gov't Services to Agentic AI
TrustedSec
Trimarc, 18 Months Later at TrustedSec
Amazon Security
Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Okta Security
Okta's Response to PHP2Shell
Datadog HQ
Optimize AI costs with Agent Observability
2026-10-21
Amazon Security
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
Talos Intelligence
Compromised eMudhra intermediate certificates
Dark Reading
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
Microsoft Security
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Amazon Security
Best practices for integrating IAM Roles Anywhere with your PKI
Palo Alto Networks
Millions of PHP Instances Exposed - What Organizations Need To Do Right Now
Dark Reading
Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
Socket
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
Krebs on Security
Widespread PHP Flaw May Cause Many Site Outages Today
Talos Intelligence
Two critical RCEs in PHP core
MIT Technology Review
The Download: introducing the Impossible issue
CISA Alerts & Advisories
Critical Vulnerabilities in PHP Require Immediate Patching
Palo Alto Networks
Advancing Agentic AI Security with Palo Alto Networks and NVIDIA
Schneier on Security
Workshop on Economics and Information Security (WEIS) Archive
Talos Intelligence
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
MIT Technology Review
We can do impossible things
MIT Technology Review
Nuclear-powered spaceships
MIT Technology Review
Exercise in a pill
Ars Technica Security
PHP warns it plans to release 2 emergency patches imminently
Sansec Threat Research
PHP2Shell: PHP RCE (CVE-2026-109618, CVE-2026-109619)
Snyk
AI Is Calling In Every Risk You've Accepted: Seven Insights From The AI Security Panel: Unfiltered
Elastic Security Labs
php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
Fastly
Fastly’s Proactive Protection for PHP2Shell, Critical PHP RCE CVE-2026-109618 and CVE-2026-109619
2026-10-20
Ars Technica Security
The Internet goes on high alert after discovery of 8 compromised TLS certs
Amazon Security
Managing identity source transition for AWS IAM Identity Center
Talos Intelligence
There's only so much code: the rise in vulnerability numbers
ReversingLabs
Why the Tools You Already Own Won’t Make You PQC-Ready
Mozilla Security
Protecting Firefox users following the compromise of eMudhra intermediate certificates
Ars Technica Security
Meta Muse exposes users' personal and business secrets when they share conversations
CISA Alerts & Advisories
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
#StopRansomware: SafePay Ransomware
CISA Alerts & Advisories
Hitachi Energy MicroSCADA X SYS600 Product
CISA Alerts & Advisories
Moxa AIG-302 ThingsPro Edge
CISA Alerts & Advisories
HMS Networks PEAK-System PCAN Windows drivers
CISA Alerts & Advisories
Hitachi Energy RTU500 Product
Schneier on Security
Possible new Cellebrite iPhone Radio Zero-Day
TrustedSec
Handling Pre-Contract FCI and CUI
RCE Security
Imperia CMS <= 11.5.4 SiteActive TEMPLATE Unauthenticated SSTI Remote Code Execution (CVE-2026-110355)
Infernux Blog
Meat_proxy_01, reporting for duty!
2026-10-19
Ars Technica Security
PSA: Patch your Plex media server before someone hacks it
Meta Security
GenRecs Tokenization: Transforming Ads Recommendation at Meta with Stable Model Vocabulary
Meta Security
The Thin Orchestrator: How We Made Our AI Agents More Reliable by Giving the Router Less to Do
Rapid7
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Microsoft Security
Agents are your newest insiders. Security must move at their speed.
Palo Alto Networks
Reinventing Endpoint Security with Cortex XDR One
Palo Alto Networks
Introducing Unit 42 Managed Agentic Endpoint Security
Schneier on Security
Training AIs to Solve CAPTCHAs
Malwarebytes
A week in security (October 12 – October 18)
Rosecurify
Seclog - #200
2026-10-18
2026-10-17
2026-10-16
Schneier on Security
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Ars Technica Security
OpenAI models hacked a crypto wallet and breached more websites
Dark Reading
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Filippo Valsorda
The NIST Elliptic Curves Seeds Bounty Has Been Claimed
Dark Reading
AI Takes Control of Robotic Arm in 16 Minutes Flat
Artem Golubin
The future of the internet could be paywalls
Palo Alto Networks
Fast-Track Your PQC Strategy: A Template for OMB M-26-15 Readiness
Microsoft Security
Managing open-weight model risk in enterprise deployments
The Citizen Lab
The Lawful Access Act’s threats to Canada’s national security
Cloudflare
Continuous accountability for Verified bots
CISA Alerts & Advisories
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
CISA Alerts & Advisories
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Alerts & Advisories
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
Schneier on Security
Backdooring Open-Weight AI Models
Malwarebytes
OpenAI sued over children safety and data use