2026-11-07
Ars Technica Security
British soldier ignored order to pull his SIM card, then got blackmailed
Microsoft Security
ARTEX abuse expands as cybercriminals target financial sector
2026-11-06
Schneier on Security
Friday Squid Blogging: New Jurassic Squid Predecessors
GitGuardian
The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now
Amazon Security
Addressing protocol security gaps in multi-tenant Kubernetes
Ars Technica Security
Chainalysis says hackers stole credentials and tokens for all of its customers
Dark Reading
AI Gave Your Incident Archive a Second Job
Socket
Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools
Schneier on Security
Pinpointing Location of Videos from Background Airplane Sounds
Cloudflare
The post-quantum future of web privacy
Dark Reading
Why Europe's Freezer Hacks Spread So Far, So Fast
Offensive Security
What AI Changes About the Cybersecurity Skills Your Team Needs
MIT Technology Review
The Download: a humanoid cleans house and Samsung builds for the AI boom
GitGuardian
How to Handle Secrets in Helm
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
MIT Technology Review
I watched a humanoid robot clean my apartment. It felt like a taste of the future.
Hacktron
Partnering with OpenAI
2026-11-05
Microsoft Security
Threat actors use agentic AI tooling to find and abuse exposed secrets
Ars Technica Security
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Black Hills Info Sec
Core Skills in the Age of AI
core-jmp
Picking apart PHP2Shell
Amazon Security
Introducing AWS account access manager: IAM role flexibility with centralized workforce access
Talos Intelligence
Bring a tent, I've got the coffee: Lessons from it-sa
Microsoft Security
New investments to reduce on-premises security risk
Cloudflare
Agents aren’t humans (but they kinda are)
Microsoft Security
What’s new in Microsoft Security: November 2026
Offensive Security
Keys to the Kingdom: The eMudhra Weak-Key Compromise
Microsoft Security
Email threat landscape: Q3 2026 trends and insights
Red Siege InfoSec Blog
DigDug: Making Your Payload Too Big to Scan
Bishop Fox Security
What Is an Agent Harness? How AI Security Tools Work
MIT Technology Review
The Download: Texas’s fragile AI boom and energy policy shifts
Escape DAST
Launching Continuous AI Pentesting: sharper with every finding, auditable with every release
CISA Alerts & Advisories
Post-Quantum Questions to Ask Your Vendors
CISA Alerts & Advisories
US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
Step Security
CVE-2026-109518: apt Flaw Lets Attackers Swap Packages After Verification and Run Code as Root
MIT Technology Review
A new bill could change how the US builds energy infrastructure
Krebs on Security
Want to Rent an Internet Address at the White House?
Nebula Security
One Call Is All It Takes: NebuSec Researchers Uncover Telegram Android Memory Corruption
Datadog HQ
Highlights from Oracle AI World 2026
2026-11-04
Ars Technica Security
Hackers exploited iOS and Android flaws to infect phones
MIT Technology Review
Texas was the new epicenter of the AI data center buildout. That might be kaput.
Embee Research
Informal Experiments with LLM's
MIT Technology Review
Roundtables: Inside the Quest for Cognitive Immortality
MIT Technology Review
What’s next for US energy policy after the midterm elections?
Ars Technica Security
Binance says hackers who stole billions in crypto spent months planning heist
Step Security
Malicious Files: Find What Supply Chain Attacks Leave Behind in Your GitHub Repositories and on Developer Machines
White Knight Labs
Exploiting PHP Foundational Vulnerabilities
Dark Reading
Incidents Move Too Fast for Pen & Paper
MIT Technology Review
The Download: blended meat, restored sight, and the agentic web
MIT Technology Review
Securing the agentic enterprise with data lineage
Elastic Security Labs
Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
NVISO Labs
Detection Engineering: Implementing Detection-as-Code in an Existing Environment: Part 2 – Execution
Elastic Security Labs
When trust becomes the payload: Inside the threats, etc quarterly report
2026-11-03
Microsoft Security
Fake-download campaign uses trojanized installers to deliver monetization payloads
Ars Technica Security
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Microsoft Security
Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms
Ars Technica Security
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Google Safety & Security
Working collaboratively to fight scams in Asia Pacific
Bishop Fox Security
AI Findings are Cheap to Find & Costly to Trust
MIT Technology Review
The Download: controlling AI agents and “Super Intelligence” loyalty tests
Schneier on Security
AIs Hacking the Law
CISA Alerts & Advisories
Subnet Solutions PowerSYSTEM Center
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
ToxSec
The One Person APT
Hunt and Hackett
Investigating BEC at two speeds
Compass Security Blog
Security Monitoring of AI Agents in Microsoft Defender XDR
Krebs on Security
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
2026-11-02
Microsoft Security
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Palo Alto Networks
New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agents
Amazon Security
Beyond DKIM key rotation: understanding email replay attacks
Palo Alto Networks
Guiding Customers Through Critical PHP Vulnerabilities
GitGuardian
Your Leaked Secrets Now Show Up in Wiz
Dark Reading
Microsoft's AI Risk Report Misses This Key Detail
Schneier on Security
AI Vulnerability Finding
Trail of Bits
Backporting security fixes at scale with Codex
Rapid7
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Malwarebytes
A week in security (October 26 – November 1)
ReversingLabs
The Sky Is Falling (Again): What PHP2Shell Says About AI, The Disclosure Process, and Security
Amazon Security
Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation
LogTriage Research
Which free IP blocklists stop real attacks? (2026-10)
Datadog HQ
Manage and deploy LLM prompts with Datadog
Infernux Blog
Log Baseline REST API and MCP server
2026-11-01
Step Security
Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
LogTriage Research
What attacks an internet-facing server — 2026-10 edition
Yunus Aydın
Sleep: Kodlama Ajanlarına Onaylanabilir Bellek
Yunus Aydın
Sleep: Reviewable Memory for Coding Agents
Rosecurify
Seclog - #202