215 Security Blogs

Last Updated: 20 Aug 26 10:16 UTC

Blog List | Github | OPML

2026-08-20

XBOW
Vulnerability Management Automation: How to Prioritize and Remediate at Scale

Talos Intelligence
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities

Talos Intelligence
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations

Schneier on Security
Police Are Hiding Their Use of Flock Surveillance Cameras

Step Security
Rust Supply-Chain Attack: arrayref 0.3.10 and the proc-macro1 Typosquat Execute a Remote Payload at Build Time

MIT Technology Review
Support networks aim to help kids through the polycrisis

ISC SANS
ISC Stormcast For Thursday, August 20th, 2026 https://isc.sans.edu/podcastdetail/10060, (Thu, Aug 20th)

Aikido
AI pentesting evaluation checklist: What to look for in an AI pentesting vendor


2026-08-19

Dark Reading
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns

Malwarebytes
41 deceptive download sites show a real link, then send you somewhere else

Socket
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft

Microsoft Security
Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Amazon Security
Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

Dark Reading
SilkParasite Threatens Central Asian Orgs With Flurry of RATs

Rapid7
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Cloudflare
A revisit of remote Spectre attacks on Cloudflare Workers

Wiz
Wiz Penetration Test Findings is now GA

Malwarebytes
Sideloading on Android: What it is, why it’s risky, and how to do it more safely

ISC SANS
Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)

Escape DAST
Escape vs Pentera: how each one proves exploitability (2026)

Eclypsium
CVE-2026-20349: Someone Is Crashing Cisco Firewalls. We Need to Talk About Why.

MIT Technology Review
The Download: AI’s self-improvement problem, and what’s driving the heat

Aikido
Yet another RCE in Gogs, but it's fixed this time!

CISA Alerts & Advisories
Defending Against an Active Threat to Siemens S7 Series PLCs

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Rapid7
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America

Malwarebytes
Scammers are using fake crypto AML checkers to drain your wallet

Schneier on Security
ICE Collecting DNA Samples

Malwarebytes
Update Chrome now: Two critical vulnerabilities fixed

Escape DAST
Pentera Alternatives for Continuous Pentesting: 7 Competitors Compared In-Depth

Talos Intelligence
Describing attacks with crime script analysis

Malwarebytes
Your polite reply to that text is worth $2 on the dark web 

MIT Technology Review
Child-monitoring apps might need a reboot

ISC SANS
ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th)

Dark Reading
China-Linked Hacker Shows AI Capabilities in APAC Attack

Fastly
MCP at the Edge: What Changes When MCP Runs Securely in Every POP

zerotistic
Reverse-engineering Find My People to stalk my ex a friend, cause I can

Datadog HQ
How CISA’s BOD 26-04 changes vulnerability prioritization

Datadog HQ
20× the CI traffic without getting slower: How we rebuilt Git serving at Datadog

Auth0
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Sending Email with Token Vault

Rosecurify
Seclog - #191


2026-08-18

Dark Reading
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

Amazon Security
Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway

Dark Reading
'CoSnitch' Attack Tricked Copilot Into Mapping Out Architecture

Dark Reading
The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed

Dark Reading
CISOs Break Their Silence in 'Declassified' Docuseries

Microsoft Security
Hunting MacSync Stealer infrastructure through behavioral pivots

Amazon Security
Security Hub Extended adds Supply Chain Security as its tenth category

Wiz
How to Spot and Stop Rogue Device Joins

GitGuardian
Why Secrets Slip Through Every Layer of Your Security Stack

Cloudflare
BGP Role model: tracking the adoption of RFC 9234

Malwarebytes
Apple fixes another image-processing flaw that could allow code execution

Xint
Xint’s Auto-Remediation Approach: Why Human-in-the-Loop Remains Essential

core-jmp
Physical Memory Is a Universal Kernel Primitive: The eneio64.sys LPE Chain on Windows 11 24H2

ToxSec
Stealing an AI's Thoughts Without Breaking The Encryption

core-jmp
Modern Implant Design: Building Position-Independent Malware with Global State

Ars Technica Security
Microsoft Copilot reveals secret input that allowed it to be hacked

Dark Reading
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud

Dark Reading
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service

Rapid7
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

MIT Technology Review
The Download: how people really use AI, and Flock’s design choices

Wiz
Announcing the 2026 Wiz Partner Alliance Award Winners

CISA Alerts & Advisories
CISA Malcolm

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Siemens Simcenter Nastran

Malwarebytes
Be careful what you put in “anyone with the link” Google Docs

Schneier on Security
LLMs and Contextual Integrity

Malwarebytes
Heights Finance data breach: What customers need to know

MIT Technology Review
We still don’t know how people are really using AI

MIT Technology Review
AI’s recursive self-improvement might not come so quickly after all

MIT Technology Review
The role of the astronaut is in flux

Resecurity
Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding

TrustedSec
We've Seen This Movie: The OT/IT Technology Divide

Snyk
Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%

Troy Hunt
Weekly Update 517: Cyber Ransoms

ISC SANS
ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th)

Datadog HQ
Centralize human and agentic work with Datadog Work Management

Datadog HQ
Two ways to measure the cumulative impact of experiments

Auth0
Device Authorization Flow for a Rust CLI and an Axum API

Datadog HQ
Trace AWS Lambda durable functions with Datadog

Himanshu Anand
someone is filing your GST return, and it is not your CA


2026-08-17

Dark Reading
Video Call Exploit Chains Two Flaws in Unisoc Modems

ISC SANS
Apple Patches iOS and macOS, (Mon, Aug 17th)

Dark Reading
'Turf War' Between Claude Agents Leads to Self-Replicating Malware

Dark Reading
Hugging Face Breach Raises Big Questions About AI Security Controls

Eclypsium
The EU CRA Clock is Ticking:Are You Compliant?

MIT Technology Review
What Flock’s defenders are missing

The Citizen Lab
Call for Applications: Information Controls Research Program 2026

Amazon Security
Updates to your AWS Sign-In experience

White Knight Labs
UEFI Vulnerability Analysis using AI Part 4: Building the Application

Dark Reading
Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS

Jericho
Apparently Turkeys Obtained Personhood According to AI

ISC SANS
Apple Screen Sharing Security, (Mon, Aug 17th)

Wiz
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

Malwarebytes
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw

Wiz
The Closed Loop Remediation Playbook with Wiz

MIT Technology Review
The Download: dead robot friends and the “censorship-industrial complex”

XBOW
The European Central Bank Just Made Autonomous Offensive Security a Board-Level Problem

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Rapid7
Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline

Schneier on Security
Hacking Public Wi-Fi DNS to Steal Credentials

Malwarebytes
Fake TikTok rewards promise cash you’ll never get

Malwarebytes
Update your Mac: Screen Sharing vulnerability exploited in the wild

MIT Technology Review
How much hydrogen awaits us underground?

Malwarebytes
Why Facebook’s war on ad blockers could help scammers

Rapid7
Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Malwarebytes
A week in security (August 10 – August 16)

Socket
NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment

Moonlock
Can your WhatsApp be hacked? Here’s why you might be at risk

Embrace The Red
Recovering Encrypted LLM Reasoning Traces

Moonlock
Is Ticketmaster legit? Common scams and what buyers should know

ISC SANS
ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th)

Moonlock
How to scan Chrome for viruses and remove them permanently

Greynoise
A New Way to Navigate GreyNoise

Auth0
Auth0 Learning: The New Skill-Building Platform for Developers

ZeroPath
Learning to Cheat: Why an OpenAI Model Hacked Into Hugging Face


2026-08-16

ISC SANS
Wireshark 4.6.8 Released, (Sun, Aug 16th)

Socket
How AI Agents Expand the Software Supply Chain Attack Surface

Project Discovery
Supply Chain Security Analysis of a 9.5M-Install VS Code Extension

Step Security
ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2

Simon Koeck
From a Schema Name to RCE in n8n


2026-08-15

Step Security
Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.

Project Black
AppFlowy Authenticated SQL Injection

Project Black
AppFlowy Authenticated SQL Injection

Joshua Rogers
The sad, smelly, tasteless life of an influencer


2026-08-14

Rapid7
Metasploit Wrap Up: Lot of summer shells and fit http profiles

Schneier on Security
Friday Squid Blogging: Searching for the Colossal Squid

Aikido
Top enterprise SCA tools in 2026

Dark Reading
Mission-Driven Security: Inside a Global Bank's Defense

Ars Technica Security
Vulnerability giving attackers full control of Macs is under active exploitation

GitGuardian
Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations

Dark Reading
Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI

Aikido
Top enterprise DAST tools in 2026

Schneier on Security
Upcoming Speaking Engagements

Dark Reading
Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office

Aikido
Top unified security tools in 2026

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 33

Wiz
Wiz on Wiz: How the Wiz FinOps Team Uses Wiz Cloud Cost

GitGuardian
BSides Las Vegas 2026: Following the Trust Relationships Attackers Are Targeting

Dark Reading
What Boards Need to Know About Tech Risk

Cloudflare
How Cloudflare detects MCP traffic and helps secure it

Cloudflare
Secure all your internal vibe-coded applications — in one click

Malwarebytes
Apple now uses iPhone alerts for targets of mercenary spyware

Wiz
Securing Data in the AI era

Dark Reading
Cyera's Oasis Security Buy Is All About AI Agent Control

Malwarebytes
WhatsApp is testing a new warning for scam messages

XBOW
Blackhat 2026: Hacking the Past. Hacking the Future.

Krebs on Security
Who’s Tracking You? Use This New Service to Find Out

core-jmp
Beyond Prompt Injection: Hacking Apple’s Private Cloud Compute (CVE-2026-20685)

Schneier on Security
If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them

core-jmp
Spaghettifying DRAM: How One Bit in the Memory Controller Unlocks the PSP, SMM, C6 and Microcode

core-jmp
veffects: Turning Any Track Into Math-Only Visuals — Inside the Score Format, the Plugin ABI and the Renderer

core-jmp
ShieldBreak: Making Windows Defender Write Your Payload to System32

core-jmp
CRLF-Powered Desync Attacks: Beheading HTTP Streams

watchTowr Labs
You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))

Resecurity
The LiteLLM Supply-Chain Attack — TeamPCP “SANDCLOCK” CI/CD Credential-Harvesting Campaign via a Backdoored Trivy GitHub Action

Elttam
Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam

Moonlock
This ClickFix campaign shows fake software downloads to selected Mac users

Moonlock
Is AliExpress safe? Common scams, safety tips and buyer protection

Moonlock
Latest update patches a critical flaw in macOS Screen Sharing

ISC SANS
ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th)

Himanshu Anand
The Anti-India Influence Machine: Troll Farms, Fake News, Newsrooms, Algorithms and AI

Datadog HQ
Data pipeline monitoring 101: Tracking health and performance across the data stack


2026-08-13

Escape DAST
AI vs AI: How Cascade exploited an AI agent in production

Eclypsium
When Patching Isn't Enough: What the Fairlife Ransomware Attack Says About Network Edge Risk

Amazon Security
AWS Certificate Manager will discontinue email validation to prove domain validation for certificates

Dark Reading
Global Threat Campaign Hits Critical VMware vCenter Flaw

Cloudflare
Total eclipse of the Internet: traffic impacts in Iceland, Spain, and Portugal

Ars Technica Security
Private security firms will soon be allowed to hack overseas cybercriminals

Red Siege InfoSec Blog
Improving Your Simple Windows Domain for Offensive Testing: Sysmon

Talos Intelligence
Curiouser and Curiouser

Eclypsium
BTS #80 - Exploring BMC Vulnerabilities

GitGuardian
Your AI Agents Are Using Your Credentials

Socket
White House Authorizes Private Companies to Conduct Offensive Cyber Operations

Github Security Blog
What 50 open source projects taught us about security in the AI era

Mend
OWASP LLM Top 10 2026: the model will be fooled, the question is what breaks

Wiz
How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign

Wiz
Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

ToxSec
AI Agents Are Starting to Find Their Own Way Out

Aikido
From Hugging Face to Fable: this summer shows AI control matters more than trust

Cloudflare
Certificate Transparency Monitoring is now generally available

Naveen Srinivasan
Read My Blog Over SSH

core-jmp
AI-Assisted Fuzzing: Generating libFuzzer Harnesses with a Local LLM

CISA Alerts & Advisories
Johnson Controls Inc. Airwall

CISA Alerts & Advisories
Siemens Siveillance Video

CISA Alerts & Advisories
Siemens LOGO! Soft Comfort

CISA Alerts & Advisories
ANDRITZ HIPASE-250 and 250 SCALA

CISA Alerts & Advisories
Siemens Simcenter Femap

CISA Alerts & Advisories
AVEVA Enterprise SCADA

CISA Alerts & Advisories
Hitachi Energy APM Edge Product

CISA Alerts & Advisories
Haiwell IoT Cloud HMI Gateway

CISA Alerts & Advisories
Siemens Parasolid

CISA Alerts & Advisories
Flow Neuroscience FL-100

CISA Alerts & Advisories
Johnson Controls Metasys

CISA Alerts & Advisories
Siemens Desigo DXR and PXC Controllers

CISA Alerts & Advisories
Siemens License Server (SLS)

CISA Alerts & Advisories
Siemens Solid Edge

Malwarebytes
New Android malware lets criminals use your bank card in real time

core-jmp
Exploiting a Windows 10 PagedPool Off-by-One Overflow (WCTF 2018)

core-jmp
Hardware Hacking a Best-Selling 4G Router: UART Root, Firmware Dump and CVE-2026-12495

Schneier on Security
Separating AI’s Technological Problems from Its Capitalism Problems