2026-09-14
2026-09-11
Schneier on Security
Friday Squid Blogging: Rotting Squid on a Beached California Boat
MIT Technology Review
Roundtables: Could AI really kill us all?
Artem Golubin
Astroturfing on Reddit and the dead internet
Dark Reading
Why AI Is So Good at Scamming Humans
Schneier on Security
My Talk at DEF CON
Dark Reading
AI Governance Can't Wait
Bishop Fox Security
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
MIT Technology Review
The Download: biotech’s future and cheaper, cleaner steel
CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Ars Technica Security
ClickFix attacks infecting PCs and Macs are going viral
Schneier on Security
Cliff Stoll’s DEF CON Talk
MIT Technology Review
Meet the under-35s shaping the future of biotech
Accomplish
Beltdown: Escaping the Claude Code sandbox
Elastic Security Labs
Linux Detection Engineering - Local Privilege Escalation
2026-09-10
Offensive Security
Are Security Teams Keeping Pace With AI-Accelerated Threats?
Talos Intelligence
We've got one word for it, and it's usually the wrong one
Microsoft Security
Protecting organizations from AI-assisted executive impersonation and invoice fraud
Microsoft Security
Detect and disrupt AI-themed attacks with Microsoft Defender
Bishop Fox Security
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
Malwarebytes
Will AI kill us all within the next decade?
MIT Technology Review
The Download: a “God-driven” cryptocurrency and a solar engineering roadmap
CISA Alerts & Advisories
NextGen Healthcare Mirth Connect
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Orthanc DICOM Server
CISA Alerts & Advisories
AVEVA Pipeline Integrity Monitor
CISA Alerts & Advisories
ST Engineering iDirect iQ-Series Terminals (Update A)
MIT Technology Review
This road map could help us decide whether to deploy solar geoengineering
MIT Technology Review
Powering AI is an architecture problem
Schneier on Security
AIs Compress Exploit Timeline
MIT Technology Review
Can the US battery market untangle from China?
MIT Technology Review
God told them to sell crypto. Their investors lost everything.
MIT Technology Review
Healthcare AI’s next test is integration
Escape DAST
How to build a continuous pentesting program
TrustedSec
So… You Found AWS Access Keys (Part 1)
Datadog HQ
How we built Datadog Experiments
2026-09-09
Microsoft Security
Threat matrix: Mapping threats across cloud web applications
Ars Technica Security
Four groups caught using the same Chrome and Windows exploit kit
Microsoft Security
Passkey-themed social engineering leads to identity and cloud compromise
Schneier on Security
Driver’s License Data for Sale
MIT Technology Review
The Download: OpenAI’s turning point for math and a battery record
core-jmp
How Can You Not Be Romantic About UNIX Domain Sockets: A 40-Year Kernel Bug From the DEF CON Stage
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA News
CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats
Schneier on Security
Claude Fable Solves a Historical Cipher
Trail of Bits
A “proof” of Fermat’s Last Theorem that fits the margin
Teleport Blog
FIPS 140-2 vs FIPS 140-3, Explained
2026-09-08
Talos Intelligence
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Krebs on Security
Microsoft Plugs Nearly 1,000 Security Holes
Dark Reading
Patch Tuesday Sets Another Record With 974 CVEs
Ars Technica Security
Why this month's Microsoft patch release is a doozy
Zero Day Initiative
The September 2026 Security Update Review
Schneier on Security
AIs as Modern Genies
ReversingLabs
AI summary attack conceals code that tampers with LLMs
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
CareCam Pro IP Cameras
CISA Alerts & Advisories
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Schneier on Security
Stealing AI Reasoning Traces
Talos Intelligence
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
Talos Intelligence
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Rosecurify
Seclog - #194
Okta Security
Hunting Vulnerabilities Using Frontier Models
Datadog HQ
Coordinate product launches with Datadog
2026-09-07
Schneier on Security
Automobile Camouflage to Hide from Flock Cameras
Malwarebytes
A week in security (August 31 – September 6)