2026-06-15
MIT Technology Review
This man with ALS is “the first power user” of a brain implant that lets him speak
Dark Reading
The Beginning of the End of Social Engineering
White Knight Labs
Harnessing the Power of Cobalt Strike Profiles for EDR Evasion – Part 3
MIT Technology Review
The Download: cutting AC emissions, and nature’s drug designer
Schneier on Security
The FCC Wants to Eliminate Burner Phones
MIT Technology Review
These new solid-state ACs promise a cool future. Scientists aren’t so sure.
Malwarebytes
A week in security (June 8 – June 14)
Bad Privacy
Protect Children or Foster Digital Literacy: Can The Canadian Government Solve a False Dichotomy?
Troy Hunt
Weekly Update 508
ISC SANS
ISC Stormcast For Monday, June 15th, 2026 https://isc.sans.edu/podcastdetail/9972, (Mon, Jun 15th)
Rosecurify
Seclog - #182
2026-06-14
Schneier on Security
Upcoming Speaking Engagements
Project Black
Pi.Alert - Unauthenticated SQL Injection
Project Black
Guide to Penetration Testing Services in Australia
2026-06-13
Step Security
400+ AUR Packages Hijacked: What the “Atomic Arch” Campaign Means for Supply-Chain Security
Project Black
LibreNMS Authenticated RCE (< 26.5.0)
Sansec Threat Research
OptinMonster supply chain attack hits 1.2 million sites
2026-06-12
Schneier on Security
Friday Squid Blogging: Squid-Inspired Fluid Pump
watchTowr Labs
Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)
Ars Technica Security
PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data
The Citizen Lab
Canada Finally Has a National AI Strategy. Experts Hate It.
The Citizen Lab
Who Watches the Watchers?
Palo Alto Networks
Securing Canada’s Digital Future: Why PBMM Matters Beyond Government
The Citizen Lab
Luis Fernando García On State Surveillance in Latin America
ISC SANS
ISC Stormcast For Friday, June 12th, 2026 https://isc.sans.edu/podcastdetail/9970, (Fri, Jun 12th)
MIT Technology Review
The Download: “reprogramming” aging, and the hidden sense of interoception
Schneier on Security
Bernie Sanders’ AI Sovereign Wealth Fund Plan
Trail of Bits
Factoring "short-sleeve" RSA keys with polynomials
Hunt and Hackett
The no-bullshit guide to NIS2
MIT Technology Review
You do your own time
MIT Technology Review
Why “reprogramming” is the buzziest approach to reversing aging right now
Google Safety & Security
How we're combatting AI scams with security, legislation and more
MIT Technology Review
Inside interoception: The hidden sense of how you feel inside
watchTowr Labs
Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)
Sansec Threat Research
Unauthenticated file upload in Amasty Order Attributes for Magento
2026-06-11
Talos Intelligence
A tale of two eras
Searchlight Cyber
Targeting Illicit Crypto Flows: Searchlight Cyber Supports Law Enforcement Takedown of AudiA6 Crypto-Mixer
Step Security
Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
Github Security Blog
Making secret scanning more trustworthy: Reducing false positives at scale
Bishop Fox Security
Enabling Proper PCI Testing with Internal Penetration Tests
Red Siege InfoSec Blog
Enumerate Domain Data (EDD): Powerview’s .NET Cousin
MIT Technology Review
The Download: soccer’s data renaissance and China’s big nuclear plans
Malwarebytes
VRChat says reported data breach never happened
Schneier on Security
Enhanced License Plate Tracking
MIT Technology Review
Google DeepMind is worried about what happens when millions of agents start to interact
MIT Technology Review
Job titles of the future: Nature’s drug designer
Eye Security Research
CVE-2026-30612: A vulnerability in Time4Popcorn (PopcornTime)
TrustedSec
Hardening Intune: The Implementation Guide
ISC SANS
ISC Stormcast For Thursday, June 11th, 2026 https://isc.sans.edu/podcastdetail/9968, (Thu, Jun 11th)
Himanshu Anand
Reading a patch tuesday diff for fun: the dhcp client memcpy that copies more than four bytes (CVE-2026-44815)
2026-06-10
The Citizen Lab
Ron Deibert Speaks About “Greek Watergate”
Dark Reading
AI Risk Worries Insurers & Businesses Alike
Microsoft Security
Turn specs into evals for any agent with ASSERT
Offensive Security
What Live Cybersecurity Training Reveals That Self-Paced Learning Doesn’t
Krebs on Security
Who Runs the Ransomware Group ‘The Gentlemen?’
Black Hills Info Sec
The Art of the Badge: A Hard Truth About Physical Security
Schneier on Security
NSO Group Hacking WhatsApp Despite Court Order
Searchlight Cyber
June 10th – This Week’s Top Cybersecurity and Dark Web Stories
Troy Hunt
Weekly Update 507
watchTowr Labs
More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)
2026-06-09
Palo Alto Networks
Beyond Human Oversight: Adapting to the Frontier AI Era
Palo Alto Networks
Shifting from Data Hoarding to Active Defense: Navigating the New Era of OMB M-26-14
Krebs on Security
A Record-Breaking Patch Tuesday for June 2026
Dark Reading
Blame AI: Patch Tuesday Hits Record 206 CVEs
Talos Intelligence
Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities
Rapid7
Patch Tuesday - June 2026
Step Security
Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter
Ars Technica Security
Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
The Citizen Lab
Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs of Bill C-8
Zero Day Initiative
The June 2026 Security Update Review
Microsoft Security
Reconstructing AI activity in investigations
Offensive Security
AI Penetration Testing vs Traditional Penetration Testing: Changes in 2026
Ars Technica Security
High-severity vulnerability in Linux caused by a single faulty character
Schneier on Security
GPS As a Key Distribution Platform
GitGuardian
Reliability Lessons From the Edges at SREday NYC
Rapid7
Rapid7 Gains Access To Anthropic’s Project Glasswing To Explore Frontier AI For Cybersecurity
Malwarebytes
Scammers love Meta, according to Lloyds Bank
Bishop Fox Security
Mythos Doesn't Deploy Itself
Palo Alto Networks
Trust is the Foundation of Sovereignty
Compass Security Blog
Entra Agent ID from a Security Perspective
TrustedSec
How to Train Your (Dragons) Analysts - A TrustedSec Guide to Picking the Perfect Purple Team
ISC SANS
ISC Stormcast For Tuesday, June 9th, 2026 https://isc.sans.edu/podcastdetail/9964, (Tue, Jun 9th)
Hacktron
The Attack Surface Is Everyone Now
Datadog HQ
Monitor Scaleway with Datadog
Datadog HQ
Monitor OVHcloud with Datadog
Datadog HQ
Monitor Nebius AI Cloud with Datadog
Himanshu Anand
Defender playbook for the LLM era
Datadog HQ
Start your day with the IDP Homepage
Datadog HQ
Improve AI agent quality with Bits Evals
2026-06-08
Amazon Security
ICYMI: May 2026 @AWS Security
Dark Reading
Check Point VPN Flaw Exploited Since Early May
Dark Reading
Iran Signed a Ceasefire — Its Hackers Didn't
Ars Technica Security
For the 2nd time in weeks, Microsoft packages laced with credential stealer
Schneier on Security
Critical Zcash Vulnerability Found and Fixed