203 Security Blogs

Last Updated: 15 Jul 26 19:00 UTC

Blog List | Github | OPML

2026-07-16

Elastic Security Labs
TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains


2026-07-15

Dark Reading
Guten Tag, Bonjour, Hola to Our European Cyber Defenders!

MIT Technology Review
Meet GPT-Red: an LLM super-hacker OpenAI built to make its models safer

Dark Reading
Is 'Tech-xit' Imminent? UK Steps Up Sovereignty Push Amid AI Strife

Meta Security
Exploring Hierarchical Interest Representation For Meta Ads Deep Funnel Optimization

Rapid7
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

Microsoft Security
Turning threat intelligence into decisive action with Defender Experts

Dark Reading
Claude Flaw Automatically Sends Malicious Prompts to AI Agents

Malwarebytes
Claude for Chrome flaw could let rogue extensions access your Gmail

Xint
Announcing Xint Pulse - The Full Capabilities of Xint Served One Scan at a Time

Black Hills Info Sec
KAPE 101: A Kroll Artifact Parser and Extractor Cheatsheet

Searchlight Cyber
How Threat Intelligence Strengthens Preemptive Threat Exposure Management (PTEM)

Wiz
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System

Dark Reading
2-Click Cursor Exploit Enables Dev Environment Takeover

Rapid7
Investigating Persistence Mechanisms in AWS

Malwarebytes
July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days

MIT Technology Review
The Download: a useful quantum machine and a record-breaking subsea tunnel

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers

CISA News
CISA and Partners Publish Guidance to Help Software Manufacturers and Online Service Providers Work With Security Researchers

Schneier on Security
A Video Screen That Is Also a Camera

Searchlight Cyber
July 14th – This Week’s Top Cybersecurity and Dark Web Stories

Malwarebytes
This fake Apple app can unlock your Mac’s password vault

HN Security
My Semgrep C/C++ ruleset is ready for prime time again

Dark Reading
Nigeria Deepens Cybersecurity Efforts as Cybercriminals See More Profits

ISC SANS
ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)

ISC SANS
Recent DShield SIEM Update, (Tue, Jul 14th)

Amazon Security
ICYMI: June 2026 @AWS Security

Troy Hunt
Weekly Update 512: IoT Lockout Fail

Dark Reading
Cribl Adds Agentic Detection Engineering & Boosts SecOps With CardinalOps Deal

Datadog HQ
Monitor Apigee X API traffic and security with Datadog

Auth0
You Are Using Auth0 The Hard Way


2026-07-14

Ars Technica Security
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

Rapid7
Patch Tuesday - July 2026

Dark Reading
Records Are Made to Be Broken: Patch Tuesday Raises Triage Stakes

Step Security
Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories

Talos Intelligence
Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Dark Reading
6 GHz Wi-Fi Flaws Could Disrupt Critical Systems

Socket
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

Krebs on Security
Microsoft Patches a Record 570 Security Flaws

Amazon Security
Security Hub adds AI workload protection and multicloud support for Microsoft Azure

ISC SANS
Microsoft Patch Tuesday July 2026 - The AI Acopolypse is Here , (Tue, Jul 14th)

Zero Day Initiative
The July 2026 Security Update Review

Dark Reading
Manage Vendor Risk in a Few Practical Steps

Schneier on Security
Upcoming Speaking Engagements

Dark Reading
Frontier AI: The Genie's Out of the Bottle, but Where's the Rulebook?

Dark Reading
ClickFix's Mushrooming Ecosystem Demands New Defense Tactics

The Citizen Lab
Canada’s Electronic Spy Agency Conducted Cyberattacks on Criminals Brokering Fentanyl Ingredients, Report Says

Amazon Security
Authenticate legitimate AI agent traffic with AWS WAF Bot Control

GitGuardian
Identity Infrastructure: Why Credentials Are the Layer Directories Don't Secure

Xint
FedRAMP Just Retired the Flat Scan. The New Rules Ask for Proof of Exploitability.

Mend
Independence is the moat

Bishop Fox Security
Introducing snowpick: Testing ServiceNow for Public Data Exposure

Cloudflare
A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed

Rapid7
CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

Dark Reading
Cursor IDE Auto-Executes Malicious Code in Poisoned Repos

MIT Technology Review
The Download: Claude’s inner workings, and the future of world models

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA News
CISA Joins NSA, FBI, DC3 and International Partners Warning of Russian Cyber Threat Activity Targeting Communications, Energy, Government and Other Critical Infrastructure Sectors

CISA Alerts & Advisories
CISA Urges SharePoint Hardening After New Exploitations

CISA Alerts & Advisories
Rockwell Automation 1715-AENTR EtherNet/IP Adapter

CISA Alerts & Advisories
ABB Advant Master Online Builder

CISA Alerts & Advisories
ABB T-MAC Plus

CISA Alerts & Advisories
ABB Ability Edgenius

Malwarebytes
Warning: Scammers are using FaceTime to empty bank accounts

Schneier on Security
Vulnerability in FIFA’s Network

Talos Intelligence
[Video] Where protection starts: Cisco Talos Intelligence Integrations

Wiz
M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions

Talos Intelligence
The serpent’s tongue: Luring the Python out of its den

Aikido
AsyncAPI npm packages backdoored via GitHub Actions

Malwarebytes
The inside job that cost ransomware victims millions

Socket
Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader

Rapid7
Rapid7 and Mindshare Partner to Accelerate Cyber Resilience Across the Middle East

MIT Technology Review
PsiQuantum has a plan to make a massive quantum computer out of light

TrustedSec
Pandora’s Container Part 1: Unpacking Azure Container Security

ISC SANS
ISC Stormcast For Tuesday, July 14th, 2026 https://isc.sans.edu/podcastdetail/10006, (Tue, Jul 14th)

Auth0
Introducing Third-Party Applications for Organizations

Fastly
MoQ in the Fast Lane

Infernux Blog
Configuring Sentinel Protected Tables

Hacktron
Watching GPT-5.6 Sol Ultra Write a Chrome Exploit: Exploit Development as We Know It Is Dead


2026-07-13

Aikido
How Aikido Intel detects malware and vulnerabilities first

Microsoft Security
Defending SaaS-based applications against ShinyHunters OAuth abuse

Eclypsium
Living on the Edge: How Threat Actors Use Network Infrastructure Against You

Dark Reading
Weak Security Continues to Fuel Russian Cyberattacks

Ars Technica Security
The US government warns that Russia state hackers are coming after your router

Dark Reading
'Yellow Teams' Are Defining the Future of AI Security

MIT Technology Review
What Anthropic’s latest AI discovery does—and doesn’t—show

Microsoft Security
Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Dark Reading
GigaWiper Lets Threat Actors Choose Their Own Destructive Attack

Meta Security
Modernizing the Meta Ads Service With an Open-Source Kernel Scheduler

Aikido
What is a dependency firewall?

Ars Technica Security
Now, defenders are embracing the prompt injection, too

Krebs on Security
Lessons Learned from CISA’s Recent GitHub Leak

Malwarebytes
Trusting your kids online isn’t enough (Lock and Code S07E14)

Amazon Security
New compliance guidance available: HITRUST i1 on AWS

Malwarebytes
Ghostcommit attack hides malicious AI instructions in images

Dark Reading
Turning the Tables on Email Scammers With 'ScamBuster'

Cloudflare
Introducing Precursor: detecting agentic behavior with continuous client-side signals

Wiz
Why IaC Coverage Belongs on Your Security Dashboard

MIT Technology Review
The Download: a donor conception cap and world models for AI

CISA Alerts & Advisories
Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Malwarebytes
Fake crypto gift card sites are getting harder to spot

Schneier on Security
AI Data Centers and the Concentration of Wealth

Trail of Bits
Rust-proof your code with our new Testing Handbook chapter

Step Security
Introducing Secret Exfiltration Protection for GitHub Actions

Malwarebytes
A week in security (July 6 – July 12)

ISC SANS
Someone Is Scanning for Your MCP Servers and AI Assistant Credentials, (Mon, Jul 13th)

Moonlock
12 Discord scams that can steal your account or money

ISC SANS
ISC Stormcast For Monday, July 13th, 2026 https://isc.sans.edu/podcastdetail/10004, (Mon, Jul 13th)

Aikido
How to maintain code quality standards with AI code and vibe coding

Greynoise
Now Available: The Threat Brief Library in the GreyNoise Platform

Fastly
Optimizing Compute for Agentic Systems With New Request Handoff Functionality

Auth0
Closing the Audit Gap in Human-to-Agent Delegation

Rosecurify
Seclog - #186

Fastly
No More Draws: What the World Cup's Knockout Rounds Reveal About Viewership


2026-07-12

GitGuardian
What CISA Got Right After Its GitHub Leak: Lessons Every Organization Should Copy

Step Security
jscrambler npm package publishes malicious preinstall binary

MaskRay's Blog
Irreducible loops

Yunus Aydın
ModHeader: Browsing Geçmişinizi api.stanfordstudies.com’a Sızdıran Chrome Eklentisi

Yunus Aydın
ModHeader: Covert Data Exfiltration to api.stanfordstudies.com


2026-07-11

Socket
jscrambler npm Package Compromised in Supply Chain Attack

Ali Yazdani
LLMs in SAST: Good, Bad, Costly

ISC SANS
Wireshark 4.6.7 Released, (Sat, Jul 11th)

Rapid7
Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit

zerotistic
When Linux and Your Decompiler Load Different Programs


2026-07-10

Schneier on Security
Friday Squid Blogging: “Squidbleed” Vulnerability

Praetorian
Bluetooth Low Energy Security Testing, Consolidated: Introducing Caeruleus

Moonlock
A verified X account is spreading the Atomic macOS stealer

Dark Reading
Jen Ellis: Connecting Cyber Community With Political Machinery

Moonlock
A vulnerability in Apple’s Hide My Email feature can expose your real email address

Dark Reading
Cybercriminals Flock to Healthcare Businesses as Attacks Surge

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 28

Amazon Security
AWS designated as a critical third party to the UK financial sector

Microsoft Security
Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Searchlight Cyber
How Attack Surface Management Powers Preemptive Threat Exposure Management

ISC SANS
My Stack Simulator, (Wed, Jul 8th)

Dark Reading
Fresh ATM Crypto Software Bugs: Jackpot or Bust?

Zero Day Initiative
CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys

Dark Reading
More Countries Jump on the Social Media 'Ban Wagon'

ToxSec
The Lethal Trifecta Broke Three Agents in 2026

Malwarebytes
This new Windows malware can take over your PC and wipe it clean

Dark Reading
AI Coding: Do Security Risks Outweigh Productivity Gains?

MIT Technology Review
The Download: Claude’s inner workings and OpenAI’s “super app”

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Cloudflare
Improving Smart Tiered Cache for Public Cloud Regions

Malwarebytes
How mule betting scams recruit ordinary people

Schneier on Security
AI Surveillance and Social Progress

Malwarebytes
Two Chrome updates in two days fix critical vulnerabilities

ISC SANS
"Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th)

MIT Technology Review
Sperm donors need limits, says a European fertility group

Moonlock
Spoofing explained: The definition, the meaning, and how it works

DarkRelay
CVSS vs EPSS Scoring: A Practical Guide to Vulnerability Prioritization

Moonlock
Is Snapchat safe? Top 6 Snapchat privacy questions answered

ISC SANS
ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002, (Fri, Jul 10th)

Moonlock
Is WhatsApp safe? Here’s our expert opinion on WhatsApp security

Datadog HQ
Making agentic token costs visible in production


2026-07-09

Amazon Security
Introducing OAuth Support for AWS MCP Server

Mend
Dependency management tools: Key features and 6 tools to know in 2026

Ars Technica Security
Patch for Windows Defender 0-day could allow attackers to fill hard disk

Dark Reading
Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure

MIT Technology Review
Anthropic found a hidden space where Claude puzzles over concepts

Dark Reading
Microsoft Reins in RoguePlanet Zero-Day Threat

Socket
Fake Braintree NuGet Package Skims Credit Cards and Harvests Merchant Credentials

Dark Reading
AI Agents Are a New Kind of Identity — and Most Organizations Aren't Ready

Talos Intelligence
WolfSSL, GeoVision, VTK vulnerabilities

Talos Intelligence
Winning 54% of the time

Step Security
Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys

Github Security Blog
How GitHub gave every repository a durable owner

Moonlock
How to get rid of a fake Apple security alert and why you’re seeing it

Wiz
How ProdSec uses Wiz

Wiz
Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense

Aikido
Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry

Jericho
Random Movie/TV Thoughts and Reviews (July 2026)

Malwarebytes
How World Cup crypto prediction sites take your money

Malwarebytes
6.9 million driver’s license numbers stolen from AssuranceAmerica

GitGuardian
GitGuardian Power for Amazon Kiro: Secrets Detection Built Into the Agent

Microsoft Security
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Dark Reading
As Global Conflicts Go Digital, Businesses Need Wartime Game Plans

Hybrid Analysis Blog
Suspected Russian Threat Actor Impersonates Legitimate Crypto Wallets to Deploy Remote Utilities

Cloudflare
Why we cannot wait for better post-quantum signature algorithms

Socket
Compromised Injective SDK npm Package Exfiltrates Wallet Keys and Mnemonics

Dark Reading
AI Gateways Offer Attackers the Keys to the Kingdom

Eclypsium
The Two BIOS Passwords Everyone Confuses

MIT Technology Review
The Download: a nuclear landmark, and China eyes Nvidia chips

CISA Blog
Lessons from CISA’s Cyber Incident

CISA Alerts & Advisories
Schneider Electric PowerChute Serial Shutdown

CISA Alerts & Advisories
Schneider Electric Easergy MiCOM Px40 Series

CISA Alerts & Advisories
OpenPLC v3

Malwarebytes
Microsoft fixes RoguePlanet zero-day in Defender

Moonlock
Is my iPhone listening to me? Here’s how to make it stop

Schneier on Security
The Language of AI Could Change How Humans Speak

Dark Reading
'GodDamn' Ransomware Uses BYOVD to Smite US Companies

Aikido
AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendors

Malwarebytes
Turn off this Meta setting before someone generates AI images of you

Sicuranext Blog
Why the HTTP QUERY Method Is a Good Idea but Accept-Query Is Not

Sicuranext Blog
Why the HTTP QUERY Method Is a Good Idea but Accept-Query Is Not

Dark Reading
European Organizations Have a Collaboration Security Confidence Gap

Hunt and Hackett
Reporting cyber security incidents starts with understanding what happened

TrustedSec
Vulnify: Giving Your Agents a CVE Brain

Fastly
How to protect your MCP Server with Fastly

Snyk
Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

Auth0
Delegation Is a Form of Respect. Here Is What That Actually Means

mez0 Blog
Vulnify: Giving Your Agents a CVE Brain


2026-07-08

Socket
npm v12 Ships With Install Scripts Off by Default, Begins Deprecating 2FA-Bypass Tokens

Dark Reading
Mexico's New Cyber Plan Faces Its First Real Test

Dark Reading
Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours

Socket
Malicious Go Module Exposes GitHub Malware Lure Network Spanning 222 Repositories

Mend
The ECB just gave banks four months to fix AI vulnerability gaps. Most of the work starts in the software supply chain.

Ars Technica Security
Google pays $250K for Linux vulnerability allowing guest VM escapes