196 Security Blogs

Last Updated: 08 Jul 26 16:46 UTC

Blog List | Github | OPML

2026-07-08

MIT Technology Review
EmTech AI 2026: The Rise of the AI Platform

SentinelOne
HPC AI Workloads Need Runtime Security. The Architecture Already Exists.

The Citizen Lab
AI Surveillance Is Being Supercharged–And It Will Chill Social Progress

Black Lantern Security
BBOT 3.0

Amazon Security
The CISO’s guide to post-quantum mandates and migrations

Black Hills Info Sec
Finding the “Goldilocks” Zone: A Practical Approach to Alert Triage

Wiz
GhostApproval: A Trust Boundary Gap in AI Coding Assistants

Troy Hunt
Weekly Update 511: Live from my Riad in Marrakech

Rapid7
Security Teams Are Ready To Become More Preemptive. What’s Holding Them Back?

Cloudflare
Introducing Meerkat: an experiment in global consensus

Krebs on Security
Felons, Fraudsters Flog Offensive Cybersecurity Startup

Wiz
Wiz ASM for any environment, any risk, everywhere

Malwarebytes
Your next car could be watching your face

MIT Technology Review
The Download: worms fight pollution, and geoengineering faces reality

Sicuranext Blog
Protect Your WordPress Using Claude Code and Karna

Sicuranext Blog
Protect Your WordPress Using Claude Code and Karna

Searchlight Cyber
July 7th – This Week’s Top Cybersecurity and Dark Web Stories

Schneier on Security
Cybersecurity and the Gap Between Skill and Ability

Trail of Bits
Mutation testing comes to DAML

Escape DAST
Product Updates: Quick fix issues by prompting your agents and follow a live tree of agents in your pentest

ISC SANS
My Stack Simulator, (Wed, Jul 8th)

Dark Reading
State IDs for AI Agents: Will Estonia Set a Precedent?

Ars Technica Security
Hackers can use 9 of the most popular AI tools to assemble massive botnets

Socket
pnpm 11.10 Hardens Registry Authentication to Block Token Redirection

DarkRelay
Nmap for Pentester: Host Discovery Guide

ISC SANS
ISC Stormcast For Wednesday, July 8th, 2026 https://isc.sans.edu/podcastdetail/9998, (Wed, Jul 8th)

Fastly
Fastly Joins DIMPACT to Collaborate on Digital Sustainability

Hacktron
GLM and DeepSeek Are Catching Frontier Models at Finding Vulnerabilities

Auth0
How to Pick the Right Auth0 Customization for Your App

Elastic Security Labs
ClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud Toolkit


2026-07-07

Palo Alto Networks
What It Takes to Secure Claude Cowork Across the AI Enterprise

Step Security
GitHub Secret Scanning Public Monitoring for Enterprises: Coverage and Gaps

Dark Reading
Big Brand Jobs Scam Targets Marketing Pros' Google Accounts

Dark Reading
Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft

Aikido
Top Burp Suite alternatives for web application security testing

Amazon Security
Enforce zero data retention on Amazon Bedrock with Bedrock Projects and service control policies

Socket
Coordinated npm and PyPI Campaign Typosquats Popular Secure Payment Apps

ISC SANS
More Odd DNS Records: NIMLOC, (Tue, Jul 7th)

Malwarebytes
How the Reddit and Discord false report scam steals accounts

Dark Reading
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows

Jericho
CISA KEV’s Revolving Door

GitGuardian
Every Laptop Is a Credential Store: Where Secrets Hide

Xint
How to Safely Implement Autonomous AI Agents for Pentesting Live Apps

Malwarebytes
Fake Netflix, Coca-Cola, and FIFA job scams target marketers

Red Siege InfoSec Blog
Improving Your Simple Windows Domain for Offensive Testing: Elastic Defend EDR

ToxSec
Cisco’s Agent Runtime SDK Bakes Security Into the Build

Cloudflare
Cloudflare proudly joins the UK government's Cyber Resilience Pledge

Eclypsium
Post-Mythos Cybersecurity: Can You Automate Infrastructure Assurance with AI?

Aikido
Top Chainguard alternatives 2026

MIT Technology Review
The Download: your stake in OpenAI, and the Treasury’s AI warning

CISA Alerts & Advisories
Digi International PortServer TS, Digi One SP IA

CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Hydro-Québec Le Circuit Electrique charging station backend

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts & Advisories
Siemens Mendix Studio Pro

CISA Alerts & Advisories
Siemens SINEC OS

CISA Alerts & Advisories
Hitachi Energy PROMOD V

CISA Alerts & Advisories
Labcenter Proteus 9

CISA Alerts & Advisories
Hitachi Energy e-mesh EMS

Malwarebytes
Claude Code’s hidden tracker was an “experiment,” says Anthropic

MIT Technology Review
The foundational elements of AI architecture that IT leaders need to scale

Schneier on Security
Google Is Suing Chinese Scammers Who Are Using Gemini

Talos Intelligence
UAT-7810 continues building ORB networks using new malware

MIT Technology Review
Why worms (and microbes) are catching on as a manure pollution solution

Escape DAST
Introducing Escape's Partner Program

Malwarebytes
Scammers are using AI to sell impossible flowers

NVISO Labs
Reducing Microsoft Sentinel Costs Without Compromising Detection – Part 2: The Firewall Quest

Compass Security Blog
Cyber Resilience Act – Part II

Resecurity
Artificial Intelligence Safety Law: Landmark Industry Regulation Bill

TrustedSec
Welcoming ObfusGit

Moonlock
12 Tinder scams: Warning signs, scam types, and what victims should do

Moonlock
Signal app scams: What the app can’t protect you from

ISC SANS
ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th)

Fastly
Fastly recognized as a Gartner® Peer Insights™ Customers' Choice for Edge Distribution Platforms

Teleport Blog
Kubernetes for Agentic AI: Best Practices for Identity and Access

Auth0
Adding Auth0 to Hono on Cloudflare Workers: A Practical Guide

Rosecurify
Seclog - #185


2026-07-06

Dark Reading
'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks

Dark Reading
CitrixBleed-ing Again? NetScaler Vulnerability Under Attack

Praetorian
FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 2 of 2)

White Knight Labs
Introduction to Tokenizers in LLMs

MIT Technology Review
Your family’s $300 stake in OpenAI

Aikido
Predicting MongoDB ObjectId() continuously in Rocket.Chat

Amazon Security
Enforce least-privilege authorization in multi-agent AI chains using Cedar

Dark Reading
JadePuffer: The First Complete LLM-Driven Ransomware Attack

Malwarebytes
How to tell if an image is AI-generated

Microsoft Security
5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management

RME-DisCo Research Group
Inferring Network Protocols from Traffic with MARISSA

Exodus Blog
Microsoft Windows Installer Folder Delete Privilege Escalation

Jericho
VDBs: Pedantic Nuances on Version Tracking

Auth0
The Single-Tenant Trap: Why Testing in Production Kills Uptime

Rapid7
A Day With Your Vector Command Red Team Pod

ISC SANS
RCS and DNS: The NAPTR Record, (Mon, Jul 6th)

MIT Technology Review
The Download: South Korea’s hottest bachelors, and advancing eye transplants

Cloudflare
Your Worker can now have its own cache in front of it

Malwarebytes
Choose your WhatsApp username carefully

Malwarebytes
NetNut botnet takes a hit. Don’t be part of the next one.

ISC SANS
ISC Stormcast For Monday, July 6th, 2026 https://isc.sans.edu/podcastdetail/9994, (Mon, Jul 6th)

Palo Alto Networks
It Might Feel Like We’ve Been Here Before, But We Haven’t

Schneier on Security
France to Stop Certifying Non-Quantum-Safe Encryption

MIT Technology Review
South Korea’s hottest new bachelors are chip workers

Malwarebytes
A week in security (June 29 – July 5)

Resecurity
CVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE

Socket
Node.js Considers Public Workflow for Security Reports Amid AI-Driven Surge


2026-07-05

Jericho
Nature Finds a Way


2026-07-04

Jericho
YouTube’s Thumbnail Generation Fraud

ToxSec
The AI Agent Kill Switch Most Teams Don’t Actually Have

Project Black
HestiaCP Admin Takeover & RCE

Project Black
CREST ANZ vs CREST International


2026-07-03

Aikido
Authentication Bypass in the default configuration phpBB

Rapid7
Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

MIT Technology Review
A device that revives eyeballs from dead donors could make eye transplants possible

Jericho
F5 Contributes to KEV Confusion

Malwarebytes
Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts

Searchlight Cyber
Why Preemptive Cybersecurity Matters

Dark Reading
Chinese LLMs Broaden the Gap Between Attackers & Defenders

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 27

MIT Technology Review
The Download: a smoking “endgame” and a new Elizabeth Bear story

Schneier on Security
Flock Cameras Can Surveil Cars Without License Plates

Troy Hunt
Swimming Pools, Pee, and Trying to Delete Your Data From the Internet

Moonlock
Fake site for the Pearcleaner app is pushing a Mac stealer

Moonlock
New Gaslight malware uses prompt injection to evade AI analysis


2026-07-02

Dark Reading
Aussies Face Reduced Cybercrime Risk, as Pressure Shifts to SMBs

Mend
9-Step AI Governance Implementation Strategy and the Solutions to Know

Step Security
10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions

Step Security
StepSecurity Maintained Actions Are Now Free for Public Repos

Eclypsium
Technical Blueprint: Hardware Security for AI Infrastructure

Ars Technica Security
Newly discovered PamStealer isn't your typical macOS malware

Dark Reading
Apple Reverses Age-Old Patch Policy to Keep Up With AI

Krebs on Security
FBI Seizes NetNut Proxy Platform, Popa Botnet

Dark Reading
FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs

Dark Reading
Ransomware Thugs Masquerade as Interpol to Entice Small Biz

Talos Intelligence
Catan and Mouse

Praetorian
Knossos: Procedurally Generated Decoy Environments

watchTowr Labs
It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)

Malwarebytes
Apple’s Hide My Email doesn’t hide it very well

Malwarebytes
Fake Google and Cloudflare verification pages spread multiple malware families

Github Security Blog
How GitHub used secret scanning to reach inbox zero

Microsoft Security
Improving security posture across the Microsoft partner ecosystem

Jericho
We’re Losing the “Cyber” War to Ourselves

Aikido
AI Pentesting for Compliance

Rapid7
Formalizing Red Teaming Offensive Methodology as a Multi-Agent AI Architecture

Bishop Fox Security
On Favicons: From Browser Icons to Attack Surface Intelligence

Malwarebytes
WinRAR flaw could allow attackers to take control of your computer

Dark Reading
Anthropic's AI Finds Bugs. IBM Bets $5B It Can Fix Them.

CISA Alerts & Advisories
CubeSpace CW0057 Reaction Wheel

CISA Alerts & Advisories
ST Engineering iDirect iQ-Series Terminals

CISA Alerts & Advisories
Gardyn IoT Hub

Schneier on Security
Cybersecurity Mission Creep in the US

Trail of Bits
GPT-5.5-Cyber built a zlib fuzzing lab in a day

Wiz
Build AI Security Agents with Wiz MCP

TrustedSec
Inheriting the Receipts: Securing the AI Your Company Already Adopted

Moonlock
How to spot a FedEx scam and what to do if you’ve already clicked

ISC SANS
ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)

Wiz
Breaking Down the White House’s Actions on Post-Quantum Cryptography Readiness

Sansec Threat Research
Amasty patches 25 Magento extensions, 1 critical

Conduition
Silent Payments Harvest-Now-Decrypt-Later Attack

Elastic Security Labs
Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3


2026-07-01

Leviathan Security
“UEFI is the New BIOS”: Lab Setup

Dark Reading
Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS

Malwarebytes
Fake Perplexity Chrome extension spies on your searches

Dark Reading
And the Winner in Dominant Malware Delivery? ClickFix

RME-DisCo Research Group
The Simpler, the Stealthier: Benchmarking Adversarial DGA Models in a Unified Framework

Amazon Security
Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

Google Safety & Security
The latest AI news we announced in June 2026

Step Security
Maven Support Comes to GitHub Checks and OSS Package Search

Step Security
15 Malicious JetBrains Plugins Stole AI API Keys from 70,000 Developers

Step Security
codfish/semantic-release-action GitHub Action has been compromised

Step Security
simonecorsi/mawesome GitHub Action has been compromised

Step Security
Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised

Step Security
Multiple @immobiliarelabs Backstage Plugins Compromised on npm

Step Security
Secure Registry now tells you which machine pulled a compromised package

Socket
PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems