2026-08-16
2026-08-15
Step Security
Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.
Project Black
AppFlowy Authenticated SQL Injection
Joshua Rogers
The sad, smelly, tasteless life of an influencer
2026-08-14
Schneier on Security
Friday Squid Blogging: Searching for the Colossal Squid
Ars Technica Security
Vulnerability giving attackers full control of Macs is under active exploitation
Dark Reading
Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI
Schneier on Security
Upcoming Speaking Engagements
Dark Reading
What Boards Need to Know About Tech Risk
MIT Technology Review
The Download: Flock’s new rules, cloning’s future, and children’s cells
Malwarebytes
WhatsApp is testing a new warning for scam messages
Krebs on Security
Who’s Tracking You? Use This New Service to Find Out
Schneier on Security
If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them
MIT Technology Review
Cloning could be used to save species—or make human “organ sacks”
MIT Technology Review
Job titles of the future: Space travel agent
MIT Technology Review
This scientist is helping build a missing map of childhood
Himanshu Anand
The Anti-India Influence Machine: Troll Farms, Fake News, Newsrooms, Algorithms and AI
2026-08-13
Eclypsium
When Patching Isn't Enough: What the Fairlife Ransomware Attack Says About Network Edge Risk
Amazon Security
AWS Certificate Manager will discontinue email validation to prove domain validation for certificates
MIT Technology Review
Roundtables: Inside the “Censorship-Industrial Complex” Idea Shaping US Policy
Ars Technica Security
Private security firms will soon be allowed to hack overseas cybercriminals
Red Siege InfoSec Blog
Improving Your Simple Windows Domain for Offensive Testing: Sysmon
MIT Technology Review
Building a practical path to post-quantum cryptography
Talos Intelligence
Curiouser and Curiouser
Eclypsium
BTS #80 - Exploring BMC Vulnerabilities
GitGuardian
Your AI Agents Are Using Your Credentials
Github Security Blog
What 50 open source projects taught us about security in the AI era
MIT Technology Review
Flock is tightening its rules in response to a growing surveillance backlash
MIT Technology Review
The Download: kids’ thoughts on AI, and female clones of male mice
CISA Alerts & Advisories
Hitachi Energy APM Edge Product
CISA Alerts & Advisories
Siemens Parasolid
CISA Alerts & Advisories
Flow Neuroscience FL-100
CISA Alerts & Advisories
Siemens LOGO! Soft Comfort
CISA Alerts & Advisories
ANDRITZ HIPASE-250 and 250 SCALA
CISA Alerts & Advisories
Siemens Solid Edge
CISA Alerts & Advisories
Siemens Simcenter Femap
CISA Alerts & Advisories
Haiwell IoT Cloud HMI Gateway
CISA Alerts & Advisories
AVEVA Enterprise SCADA
CISA Alerts & Advisories
Johnson Controls Metasys
CISA Alerts & Advisories
Siemens Siveillance Video
CISA Alerts & Advisories
Johnson Controls Inc. Airwall
CISA Alerts & Advisories
Siemens License Server (SLS)
CISA Alerts & Advisories
Siemens Desigo DXR and PXC Controllers
Schneier on Security
Separating AI’s Technological Problems from Its Capitalism Problems
Talos Intelligence
Dissecting the JWR phishing framework
MIT Technology Review
What’s behind this summer’s heat, and why 2027 could be worse
MIT Technology Review
How kids feel about AI, in their own words
TrustedSec
AI Offense is Not Noclip Mode
ISC SANS
Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)
Fastly
The Invisible Stadium
2026-08-12
Ars Technica Security
Terabytes of credentials leaked in massive supply-chain attack
Ars Technica Security
Researchers found a way to hijack devices through Zoom screen sharing
Meta Security
How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808
Schneier on Security
Prompt Injections for Defense
Troy Hunt
Weekly Update 516: Live From Vietnam
Ars Technica Security
DEF CON crowd suspected in fake-hotspot attack on Delta flight
Teleport Blog
Navigating SAMA, ADGM & DFSA Requirements with Teleport
Rosecurify
Seclog - #190
2026-08-11
Talos Intelligence
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
Amazon Security
Landing Zone Accelerator Independent Assessment Report for C5:2020 now available on AWS Artifact
Krebs on Security
Microsoft Plugs Nearly 400 Security Holes
Rapid7
Patch Tuesday - August 2026
Ars Technica Security
Chrome adopts what may be the best protection yet against account takeovers
Malwarebytes
Fake CCleaner installs GhostDesk Chrome spyware
Zero Day Initiative
The August 2026 Security Update Review
Amazon Security
AWS successfully completed its 2025-26 NHS DSPT assessment
Schneier on Security
AI Genie in the Wild
Ars Technica Security
New surveillance tech links your phone to your license plate
Malwarebytes
Love/hate relationship: The AI affair. Young people love AI, but it’s breaking their trust
CISA Alerts & Advisories
Mira Hormone Monitor, Mira Android App
CISA Alerts & Advisories
Pulsetto Vagus Nerve Stimulator
CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Johnson Controls C-CURE 9000 and Victor application server (Update A)
Ars Technica Security
New Pass-ta-key attack reveals all the things we didn't know about passkeys
Schneier on Security
AI for Military Support
Bishop Fox Security
Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898
Elastic Security Labs
13 million tool calls: auditing every AI coding agent action with Elastic Agent
Joshua Rogers
4 jsoup vulnerabilities
Sansec Threat Research
Adobe patches critical Magento account takeover (APSB26-92)
2026-08-10
Amazon Security
AWS completes the 2026 Police-Assured Secure Facilities (PASF) audit in Europe (London)
Mozilla Security
Updated GPG key for signing Firefox and Thunderbird Releases
Cloudflare
Everything we launched during Agents Week
Dark Reading
Coruna, DarkSword iOS Exploits Proliferate Globally
Microsoft Security
Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise
Include Security
Web App Pentesting in the AI Era
Dark Reading
Sherlock Holmes Was the 'OG' Social Engineer
Microsoft Security
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
Ars Technica Security
A researcher bought noreply.net. Companies started sending him secrets.
Include Security
Hiring – Principal Security Consultant
CISA Alerts & Advisories
#StopRansomware: Gunra Ransomware
Schneier on Security
Python Now Has a Post-Quantum Encryption Library
Malwarebytes
A week in security (August 3 – August 9)
Resecurity
Metabase Zero-Day Exploited in the Wild: Unauthenticated SQL Injection Leading to Full Admin Access
Teleport Blog
How Two Small Bugs Led to a Critical Vulnerability and a Cryptography Audit of Go’s SSH Library