2026-10-13
Google Safety & Security
Developing Gemini 4 Argon responsibly and safely
Github Security Blog
GitHub’s model for secret detection: Finding more secrets with less noise
Meta Security
Meta’s Generative Ads Model (GEM): Scaling the Central Model and Compute Engine for Frontier Ads AI
Silverfort
5 cybersecurity assumptions AI attacks break
MIT Technology Review
The Download: open model trade-offs and geothermal power’s promise
CISA Alerts & Advisories
Swann Communications SWIFI-SE2KIC
Shielder Blog
Power Grid Model Security Audit
MIT Technology Review
Open models have real benefits. Do they outweigh the risks?
MIT Technology Review
AI labs are buying data from dead startups to train their models
CrankySec
Still Shit!
2026-10-12
Amazon Security
GuardDuty Extended Threat Detection has added five new indicators to surface attack sequences
Meta Security
OCP Summit 2026: Powering AI with Open Innovations in Scale-Up, Scale-Out, and Scale-Across Networks
Amazon Security
Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM
Schneier on Security
FBI Arrests Suspect in FBI-Hacking Case
MIT Technology Review
The Download: moon city problems and drone traffic controllers
Filippo Valsorda
(Post-Quantum) Cryptographic Right Answers
Malwarebytes
Phishing emails are baiting your AI assistant
MIT Technology Review
What it would take to build a city on the moon
MIT Technology Review
The ecologist revealing the invisible networks that revive rainforests
Malwarebytes
A week in security (October 5 – October 11)
MaskRay's Blog
Who pays for Clang
Rosecurify
Seclog - #199
Elastic Security Labs
Auditing the auditor: Unmasking Apex Accelerator
2026-10-09
Schneier on Security
Friday Squid Blogging: I Caught a Squid
Dark Reading
AI Scramble Drives Cybersecurity M&A Boom
Cloudflare
Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash
Dark Reading
What We Missed: FBI Strikes Back at ShinyHunters
Step Security
GhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories
Cloudflare
Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects
Dark Reading
Social Engineering AI Agents: The New BEC for 2026
Cloudflare
Deno is joining Cloudflare
MIT Technology Review
The Download: AI’s refusal problem and weight-loss drug side effects
Socket
New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials
MIT Technology Review
We’re still figuring out the side effects of GLP-1 weight-loss drugs
MIT Technology Review
Job titles of the future: Delivery drone air traffic controller
MIT Technology Review
We’re putting too much faith in AI’s ability to say no
ISC SANS
ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)
Semgrep
The End Is Nigh for Code Review
2026-10-08
Microsoft Security
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
Ars Technica Security
Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027
Step Security
StepSecurity Now Inventories AI Agent Skills in Your GitHub Repositories and on Developer Machines
Talos Intelligence
Making sure the checks get printed
Github Security Blog
How one bug bounty researcher chooses the features they investigate
Jericho
Concert Review: Tricky
Google Safety & Security
Sign in quickly and securely with passkeys.
The Citizen Lab
The Secrets of a US Spyware King
Malwarebytes
Amazon has an uncomfortably personal profile on you
CISA Alerts & Advisories
Satel Netco Design
Dark Reading
Writing the Next Chapter
CISA Alerts & Advisories
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
CISA Alerts & Advisories
Red Lion Controls N-Tron 700 Series
CISA Alerts & Advisories
Grid Protection Alliance openPDC and openHistorian
Schneier on Security
How Technology Empowers—and Imperils—Dictators
Zero Day Initiative
Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn
Talos Intelligence
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Talos Intelligence
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
Step Security
Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It
Simon Koeck
A Single POST Freezes Any Next.js Server
Elastic Security Labs
Introducing AlertZero: Inbox zero for your alert queue
Teleport Blog
How to Tie Kubernetes Audit Logs to Individual Engineers
2026-10-07
Amazon Security
Building your AI vulnerability harness, Part 1
Dark Reading
OpenAI Agent Escape Causes Wikimedia Service Outage
Talos Intelligence
Microsoft, Adobe, Apple, and Foxit vulnerabilities
Eclypsium
BTS #83 - AI's Impact on Cybersecurity
Amazon Security
Part 1 – Cybersecurity journeys: I didn’t plan this
ReversingLabs
CRA compliance will be judged by the binary you ship
Microsoft Security
3 lessons from frontier AI vulnerability research
Jericho
Colfax
Google Safety & Security
We're making it easier to identify AI-generated content globally.
Krebs on Security
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Schneier on Security
Apple’s Verified Photography System
Malwarebytes
Another ShinyHunters suspect arrested
Talos Intelligence
One breach, please, and make no mistakes
Zero Day Initiative
Pwn2Own Ireland 2026 - Day Two Results
Infernux Blog
Log Baseline 0.5.0 and the log baseline explorer