2026-07-22
Ars Technica Security
OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face
Github Security Blog
Next chapter: Restructuring GitHub’s bug bounty program
Artem Golubin
Domain registration information should be transparent
Aikido
SQL injection isn't dead
NVISO Labs
Intercepting Android WebView traffic under new certificate validity requirement by Chromium
Black Hills Info Sec
The Life of a SOC Analyst: Responsibilities, Challenges, and Strategies for Success
Searchlight Cyber
Preemptive Threat Exposure Management: Frequently Asked Questions
Eclypsium
Announcing InfraTrust, the source of intelligence on security risks across hardware infrastructure.
Searchlight Cyber
July 21st – This Week’s Top Cybersecurity and Dark Web Stories
MIT Technology Review
The Download: NASA’s new space telescope and OpenAI’s autonomous hacker
Schneier on Security
First-Person Identity Theft Story
MIT Technology Review
Shape-shifting mirrors on NASA’s new space telescope could unveil Jupiters like our own
Krebs on Security
LG to Ban Residential Proxies from Smart TV Apps
2026-07-21
Aikido
Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust you
Black Lantern Security
CVE-2026-12118 - IBM webMethods Integration Server: Pre-Auth RCE via WmServiceMock
Zero Day Initiative
Pwn2Own Ireland 2026 – New Targets and Categories
Héber Júlio
OSCP — The Good, Very Good, and the Bad
Amazon Security
Do more with AWS WAF labels using dynamic label interpolation
Bishop Fox Security
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit
Ars Technica Security
Apps targeted at US troops contain Chinese and Russian code
MIT Technology Review
The Download: Chinese AI divides the White House, and a record copyright payout
CISA Alerts & Advisories
Siemens CADRA
CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW
CISA Alerts & Advisories
Rockwell Automation Studio 5000 Logix Designer
CISA Alerts & Advisories
Rockwell Automation 1734 POINT I/O
CISA Alerts & Advisories
Rockwell Automation FactoryTalk Services Platform
CISA Alerts & Advisories
Siemens Opcenter X
CISA Alerts & Advisories
Rockwell Automation 1718-AENTR/1719-AENTR
CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB2
CISA Alerts & Advisories
Siemens IAM Client
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Siemens SIDIS Secured SmartPlug
Schneier on Security
MIT to Become Hotbed of AI Video Surveillance
Escape DAST
wp2shell (CVE-2026-63030 + CVE-2026-60137): WordPress pre-auth RCE, now detected by Escape
MIT Technology Review
Advancing next-gen AI with materials science innovation
Sicuranext Blog
Patching WP2Shell in the dark using PAI
Sicuranext Blog
Patching WP2Shell in the dark using PAI
Compass Security Blog
The Hidden Privilege of Automation Platforms
ISC SANS
ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)
Teleport Blog
Identity Security for AI
2026-07-20
Filippo Valsorda
Opaque, Interoperable Passkey Records (and a Go API)
Amazon Security
Introducing the Amazon GuardDuty investigation agent: on-demand AI-powered threat assessment
Dark Reading
CISOs Feel the Heat Over AI Risk
Dark Reading
Attackers Combo Up Evasion Tactics for BEC Phishing
MIT Technology Review
China’s AI models have Trump’s AI world at war with itself
Exodus Blog
Dnsmasq DNS Remote Heap Buffer Overflow
Ars Technica Security
Pay up or not? Ransomware surge has victims facing tough choices.
Dark Reading
Cybersecurity Keeps Events 'Uneventful'
MIT Technology Review
The Download: AI hiring biases, and weather data sabotage
Escape DAST
Best AI DAST tools in 2026: ranked, compared, and reviewed for enterprise security teams
Schneier on Security
On Flock License Plate Tracking Cameras
MIT Technology Review
AI is more likely than humans to form biases when hiring
Malwarebytes
A week in security (July 13 – July 19)
ISC SANS
ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)
Rosecurify
Seclog - #187
2026-07-19
Eye Security Research
wp2shell: incident response guide (CVE-2026-63030 + CVE-2026-60137)
Step Security
SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor
Bad Privacy
Should Canada’s Government Be More Transparent About the Slippery Slope of Enforcing Digital ID?
Project Black
Should I Domain Join Backup Servers?
2026-07-18
Elastic Security Labs
New North Korean campaign uses fake coding interviews to steal developer credentials
2026-07-17
Schneier on Security
Friday Squid Blogging: Squid Washing Up on Cape Cod Beach
Dark Reading
Inc Ransomware Exploits SonicWall SMA Zero-Days
The Citizen Lab
US Military Smartphones Targeted Through Roaming and Ad Tech
Dark Reading
The Real AI Threat Is Blind Trust
Microsoft Security
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
Bishop Fox Security
Using MCP Agents for Penetration Testing
MIT Technology Review
The Download: perimenopause misinformation and China’s latest AI leap
Schneier on Security
Details of Alan Turing’s Voice Encryption System
Malwarebytes
How to use GitHub safely
MIT Technology Review
There’s a lot of hype around perimenopause. Don’t buy it.
MIT Technology Review
The risk of weather data sabotage is rising
ISC SANS
ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)
2026-07-16
Microsoft Security
ACR Stealer: Two observed intrusion chains amid increased threat activity
Dark Reading
Agentic AI: Taming the Unpredictable
Ars Technica Security
Now, even Russia's most elite hackers are using Clickfix to infect devices
Talos Intelligence
Begun, the Patch Wars have
Escape DAST
Best GraphQL security tools in 2026: An in-depth guide, including business logic and enterprise coverage
Microsoft Security
Least privilege for AI agents: Identity, access, and tool binding
Palo Alto Networks
Announcing the General Availability of Prisma AIRS AI Gateway
Schneier on Security
Protecting Privacy in an AI Era
Palo Alto Networks
Palo Alto Networks and AT&T - Delivering Quantum-Resilient SASE Fabric
Malwarebytes
The backlash against Flock cameras is spreading
CISA Alerts & Advisories
Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix
CISA Alerts & Advisories
Siemens SICAM 8
CISA Alerts & Advisories
Rockwell Automation Arena
CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
NASA Core Flight System (cFS) Health & Safety (HS) Application
CISA Alerts & Advisories
AutomationDirect Productivity Suite
CISA Alerts & Advisories
Rockwell Automation Flex 5000 Adapter
CISA Alerts & Advisories
Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT
CISA Alerts & Advisories
Rockwell Automation FactoryTalk DataMosaix
CISA Alerts & Advisories
SALTO ProAccess Space
Talos Intelligence
The Hunter's Paradox: Is it time to embrace automated threat hunting?
Talos Intelligence
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
Malwarebytes
Samsung backs down on threat to delete health data
Hunt and Hackett
The greatest cyber risk lies in what organizations cannot see
Dark Reading
Police Disrupt a €140M Cyber Fraud Ring in Spain
TrustedSec
CMMC is (Not) Cancelled
Microsoft Security
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
Step Security
Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories
Step Security
Runtime Security for Third-Party GitHub Actions Runners: Bitrise, Blacksmith, Depot, Namespace, and Warp
Okta Security
OpenSSL HollowByte: A DoS Hiding in 11 Bytes
Elastic Security Labs
TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains
2026-07-15
Dark Reading
Forgotten Bootloaders Expose Secure Boot Blind Spot
Ars Technica Security
Windows 0-day drops the same day Microsoft releases record number of patches