2026-07-21
Aikido
Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust you
Black Lantern Security
CVE-2026-12118 - IBM webMethods Integration Server: Pre-Auth RCE via WmServiceMock
Zero Day Initiative
Pwn2Own Ireland 2026 – New Targets and Categories
Héber Júlio
OSCP — The Good, Very Good, and the Bad
Amazon Security
Do more with AWS WAF labels using dynamic label interpolation
Ars Technica Security
Apps targeted at US troops contain Chinese and Russian code
MIT Technology Review
The Download: Chinese AI divides the White House, and a record copyright payout
CISA Alerts & Advisories
Siemens CADRA
CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW
CISA Alerts & Advisories
Siemens IAM Client
CISA Alerts & Advisories
Rockwell Automation 1734 POINT I/O
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Rockwell Automation FactoryTalk Services Platform
CISA Alerts & Advisories
Siemens SIDIS Secured SmartPlug
CISA Alerts & Advisories
Siemens Opcenter X
CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB2
CISA Alerts & Advisories
Rockwell Automation Studio 5000 Logix Designer
CISA Alerts & Advisories
Rockwell Automation 1718-AENTR/1719-AENTR
Schneier on Security
MIT to Become Hotbed of AI Video Surveillance
Escape DAST
wp2shell (CVE-2026-63030 + CVE-2026-60137): WordPress pre-auth RCE, now detected by Escape
MIT Technology Review
Advancing next-gen AI with materials science innovation
Sicuranext Blog
Patching WP2Shell in the dark using PAI
Sicuranext Blog
Patching WP2Shell in the dark using PAI
Compass Security Blog
The Hidden Privilege of Automation Platforms
ISC SANS
ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)
Teleport Blog
Identity Security for AI
2026-07-20
Filippo Valsorda
Opaque, Interoperable Passkey Records (and a Go API)
Amazon Security
Introducing the Amazon GuardDuty investigation agent: on-demand AI-powered threat assessment
Dark Reading
CISOs Feel the Heat Over AI Risk
Dark Reading
Attackers Combo Up Evasion Tactics for BEC Phishing
MIT Technology Review
China’s AI models have Trump’s AI world at war with itself
Exodus Blog
Dnsmasq DNS Remote Heap Buffer Overflow
Ars Technica Security
Pay up or not? Ransomware surge has victims facing tough choices.
Dark Reading
Cybersecurity Keeps Events 'Uneventful'
MIT Technology Review
The Download: AI hiring biases, and weather data sabotage
Escape DAST
Best AI DAST tools in 2026: ranked, compared, and reviewed for enterprise security teams
Schneier on Security
On Flock License Plate Tracking Cameras
MIT Technology Review
AI is more likely than humans to form biases when hiring
Malwarebytes
A week in security (July 13 – July 19)
ISC SANS
ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)
Rosecurify
Seclog - #187
2026-07-19
Eye Security Research
wp2shell: incident response guide (CVE-2026-63030 + CVE-2026-60137)
Step Security
SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor
Bad Privacy
Should Canada’s Government Be More Transparent About the Slippery Slope of Enforcing Digital ID?
Project Black
Should I Domain Join Backup Servers?
2026-07-18
Elastic Security Labs
New North Korean campaign uses fake coding interviews to steal developer credentials
2026-07-17
Schneier on Security
Friday Squid Blogging: Squid Washing Up on Cape Cod Beach
Dark Reading
Inc Ransomware Exploits SonicWall SMA Zero-Days
The Citizen Lab
US Military Smartphones Targeted Through Roaming and Ad Tech
Dark Reading
The Real AI Threat Is Blind Trust
Microsoft Security
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
Bishop Fox Security
Using MCP Agents for Penetration Testing
MIT Technology Review
The Download: perimenopause misinformation and China’s latest AI leap
Schneier on Security
Details of Alan Turing’s Voice Encryption System
Malwarebytes
How to use GitHub safely
MIT Technology Review
There’s a lot of hype around perimenopause. Don’t buy it.
MIT Technology Review
The risk of weather data sabotage is rising
ISC SANS
ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)
2026-07-16
Microsoft Security
ACR Stealer: Two observed intrusion chains amid increased threat activity
Dark Reading
Agentic AI: Taming the Unpredictable
Ars Technica Security
Now, even Russia's most elite hackers are using Clickfix to infect devices
Talos Intelligence
Begun, the Patch Wars have
Escape DAST
Best GraphQL security tools in 2026: An in-depth guide, including business logic and enterprise coverage
Microsoft Security
Least privilege for AI agents: Identity, access, and tool binding
Palo Alto Networks
Announcing the General Availability of Prisma AIRS AI Gateway
Schneier on Security
Protecting Privacy in an AI Era
Palo Alto Networks
Palo Alto Networks and AT&T - Delivering Quantum-Resilient SASE Fabric
Malwarebytes
The backlash against Flock cameras is spreading
MIT Technology Review
The Download: OpenAI unveils GPT-Red and heat pumps rise in the US
CISA Alerts & Advisories
Rockwell Automation FactoryTalk DataMosaix
CISA Alerts & Advisories
Rockwell Automation Arena
CISA Alerts & Advisories
AutomationDirect Productivity Suite
CISA Alerts & Advisories
Rockwell Automation Flex 5000 Adapter
CISA Alerts & Advisories
Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT
CISA Alerts & Advisories
Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix
CISA Alerts & Advisories
Siemens SICAM 8
CISA Alerts & Advisories
SALTO ProAccess Space
CISA Alerts & Advisories
NASA Core Flight System (cFS) Health & Safety (HS) Application
CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog
Talos Intelligence
The Hunter's Paradox: Is it time to embrace automated threat hunting?
Talos Intelligence
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
MIT Technology Review
Why heat pumps are still so hot in the US
Malwarebytes
Samsung backs down on threat to delete health data
Hunt and Hackett
The greatest cyber risk lies in what organizations cannot see
Dark Reading
Police Disrupt a €140M Cyber Fraud Ring in Spain
TrustedSec
CMMC is (Not) Cancelled
Microsoft Security
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
Step Security
Runtime Security for Third-Party GitHub Actions Runners: Bitrise, Blacksmith, Depot, Namespace, and Warp
Step Security
Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories
Okta Security
OpenSSL HollowByte: A DoS Hiding in 11 Bytes
Elastic Security Labs
TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains
2026-07-15
Dark Reading
Forgotten Bootloaders Expose Secure Boot Blind Spot
Ars Technica Security
Windows 0-day drops the same day Microsoft releases record number of patches
Microsoft Security
Turning threat intelligence into decisive action with Defender Experts
Black Hills Info Sec
KAPE 101: A Kroll Artifact Parser and Extractor Cheatsheet
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers
Schneier on Security
A Video Screen That Is Also a Camera
Searchlight Cyber
July 14th – This Week’s Top Cybersecurity and Dark Web Stories
Amazon Security
ICYMI: June 2026 @AWS Security
Troy Hunt
Weekly Update 512: IoT Lockout Fail
Hacktron
Breaking Into PostHog Prod Database
Teleport Blog
The Room Where V2 Happens