219 Security Blogs

Last Updated: 28 Aug 26 23:36 UTC

Blog List | Github | OPML

2026-11-12

Dark Reading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI


2026-10-08

Dark Reading
[Virtual Event] Building a Secure AI Strategy for the Enterprise


2026-08-29

Binarly
MLTracer: Syscall-Based Malicious Model Detection and Labeling, with Static-Scanner Evasion Taxonomy


2026-08-28

Step Security
@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow

Aikido
Popular code generator for TanStack Query hit by supply chain worm

Schneier on Security
Friday Squid Blogging: Truckload of Squid Spills in Rhode Island

Socket
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack

Aikido
Securing Docker images

Dark Reading
Hundreds of OpenAI Agents Invaded Hugging Face Servers

Amazon Security
Extend your data perimeter to the AWS Management Console with Private Access

Dark Reading
Offensive Security Investments Surge as AI Threats Increase

ReversingLabs
Shai-Hulud worm arrests: What you need to know

Socket
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 35

Rapid7
Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

Dark Reading
You Need Cyber Deception for OT

Malwarebytes
Protect your WhatsApp account with new passkey and 2FA upgrades

Dark Reading
Defining an AI Kill Switch Is Hard, but Necessary

Socket
Socket Now Protects the Microsoft Edge Extension Ecosystem

Dark Reading
The Vulnpocalypse Is Repricing the Bug Bounty Economy

Cloudflare
BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents

MIT Technology Review
The Download: a secretive antiaging drug and joining virtual power plants

core-jmp
Process ID Mutation via BYOVD: Evading Sysmon Telemetry Through Kernel Exploitation

Malwarebytes
The AI agent swarm that attacked Hugging Face is a warning for the future

Ars Technica Security
Authorities arrest 2 alleged members of prolific hacking group TeamPCP

Schneier on Security
AI Doesn’t Mean the End of Mathematics—at Least Not Yet

Rapid7
PaperCut NG/MF Critical Zero-Day Exploited in the Wild

MIT Technology Review
How to sign up for a virtual power plant—and decide whether you should

core-jmp
I Found a KVM Guest-to-Host Heap Corruption Bug and Someone Else Got There First

ISC SANS
Some Malicious PE Stats, (Thu, Aug 27th)

ISC SANS
ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th)

Greynoise
Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets

Datadog HQ
Reduce sensitive data exposure with build-time allowlists


2026-08-27

Naveen Srinivasan
BPF Token Delegation

MIT Technology Review
A startup claims it’s found a drug to make your blood young

Dark Reading
Chinese Routers Sold Worldwide Contain Backdoors

Talos Intelligence
“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

Dark Reading
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026

Cloudflare
How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Wiz
Inside 90 days of attacks on AI infrastructure

ReversingLabs
Extend CrowdStrike Falcon with Permanent Intelligence

Amazon Security
Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK

Boschko Security Blog
UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range

Socket
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads

Microsoft Security
​​​​​​What’s new in Microsoft Security: August 2026

Github Security Blog
OpenClaw went viral. Meet the maintainers building and securing it.

Wiz
From Concept to Context Engine: How Wiz Built AI-Powered Data Discovery

Malwarebytes
Flock wants privacy to meet surveillance halfway

GitGuardian
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

Malwarebytes
Fake listings can turn trusted platforms into scam springboards

XBOW
Continuous Attack Surface Testing vs Penetration Testing: Key Differences

Ars Technica Security
Claude, Codex, and Hermes installed unowned code inside corporate networks

Rapid7
Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs

Ars Technica Security
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face

Malwarebytes
Fake Apple Pay charge brings the classic tech support scam to your phone

MIT Technology Review
The Download: inside OpenAI’s Hugging Face hack, and a new EV takes on the US

CISA Alerts & Advisories
Rockwell Automation OTTO Fleet Manager

Wiz
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps

CISA Alerts & Advisories
Xiiaozet LK100W

CISA Alerts & Advisories
Mitsubishi Electric CNC Series (Update A)

CISA Alerts & Advisories
Mitsubishi Electric Multiple FA Products (Update D)

CISA Alerts & Advisories
CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Ebyte NA111-M

CISA Alerts & Advisories
All-Line Equipment Company Fuel-Boss

CISA Alerts & Advisories
Applied Systems Engineering ASE2000 V2 Communications Test Set

Aikido
Good riddance, TeamPCP. Now for the hard part.

Dark Reading
Russian Hackers Phish EU Officials Over Messaging Apps

Krebs on Security
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Malwarebytes
New Instagram and Facebook rules set a default two-hour limit for teens

Talos Intelligence
JavaScript obfuscation: From party trick to phishing kit

MIT Technology Review
Is Slate Auto’s new electric truck the EV Americans need?

ISC SANS
A polymorphic phishing page (that occasionally breaks itself), (Thu, Aug 27th)

Schneier on Security
LLM-Based Social Engineering Scams

core-jmp
SLEEPWALKER: A Passive Backdoor With Its Own Command Language

core-jmp
Two Bytes to RCE: Chaining nginx rift and PoolSlip into an ASLR-Independent Exploit

Embrace The Red
Breaking Claude Code Opus 5 Auto Mode

Step Security
Dev Machine Guard Now Inventories Where Developer Credentials Live

Step Security
Dev Machine Guard Now Inventories Browser Extensions on Developer Machines

ISC SANS
ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)

Nebula Security
Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

Semgrep
Semgrep Multimodal Goes Beyond Authentication: What we learned from Comparing it with Mythos

Datadog HQ
What we learned about AI agent security by monitoring our agents

Datadog HQ
Debug live production code without redeploying with Datadog Live Debugger

Himanshu Anand
a fake resume invoked China's defence-tech elite, then installed VShell


2026-08-26

Dark Reading
Dark Caracal Adds New Malware to Cyber Espionage Arsenal

Dark Reading
'HTTP Terminator' Hunts for Novel Desync Attacks

Amazon Security
ICYMI: July 2026 @AWS Security

Dark Reading
Red Flags That Expose Fake North Korean IT Workers

Socket
Socket for ClickUp Is Now Available

MIT Technology Review
The inside story on why OpenAI agents hacked Hugging Face

core-jmp
Static Devirtualization of Tencent VM: Breaking ACE Anti-Cheat Obfuscation with Guided Symbolic Execution

Amazon Security
Detecting multi-stage attacks on AWS: A guide to cross-service signal correlation

Dark Reading
Android Malware Hijacks Update System for Car Head Units

Microsoft Security
When AI infrastructure becomes the target: Securing gateways and control points

Wiz
Democratizing FinOps with Wiz: Driving Cost Attribution with the Wiz Service Catalog

ISC SANS
Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)

Aikido
Top Minimus alternatives in 2026

Mend
The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right

Wiz
The State of Cloud Risk 2026: Most Security Findings Aren’t Real Attacker Opportunities

ReversingLabs
Infostealers highlight malware-as-a-service trend

Eclypsium
AI Infra Summit 2026

ToxSec
The AI Supply Chain Is Getting Weird [Monthly Guest Post]

Malwarebytes
Update Chrome before you browse again

Bishop Fox Security
A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console

SentinelOne
Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who’s Exploiting Your Perimeter

Malwarebytes
Popular school apps may be sharing student data with advertisers

MIT Technology Review
The Download: the Kids issue arrives, and Bill Gates reveals his AI fears

Schneier on Security
Spyware for Babies

CISA Alerts & Advisories
CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
CISA Vulnerability Review

Dark Reading
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month

Trail of Bits
VMs won't contain cyber-capable agents

Escape DAST
LLM security testing: how to pentest LLMs and MCP servers

Aikido
Software supply chain security requires decisions rather than defaults

Aikido
Aikido Security achieves ISO 42001:2023 certification for AI governance

Talos Intelligence
Choose your fighter: Balancing competing requirements to select models for your AI SOC

Aikido
Aikido launches agentic pentesting for Android apps

MIT Technology Review
AI models flub these intelligence tests. Can you fare any better?

MIT Technology Review
Raised on AI

Dark Reading
Interpol's Jackal IV Disrupts West African Crime Infrastructure

Malwarebytes
Beware of fake Indeed interview apps used to install spyware

Dark Reading
Nigeria Looks to Sovereign Cloud for Cyber, National Security

MIT Technology Review
Bill Gates says we’ve passed AI’s danger thresholds. Now what?

Elttam
Ruby Marshal Kick-off Gadgets - elttam

Elttam
Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam

Snyk
Why Your AI Application Is Exposed Snyk

ISC SANS
ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)

Himanshu Anand
I had some free time, so I tried to pwn V8

Datadog HQ
Beyond the $1 AI era: How federal agencies can build the evidence for FY27 renewals

Datadog HQ
How Datadog saves over $1 million each month by optimizing AI usage

Auth0
Migrating to Auth0 for Startups from Another Auth Solution

Fastly
Inside Fastly’s 2026 Internship Program: Projects, Impact & Culture


2026-08-25

Amazon Security
Fast Track ISM-ready cloud environments and IRAP Assessments with Landing Zone Accelerator on AWS

Troy Hunt
A Cautionary Tale About Data Breach Claims, Verification and Carhartt

Dark Reading
Hidden Prompts Trick AI Into False Email Summaries

Dark Reading
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw

Binarly
Top 10 Product Security Tools in 2026

Socket
Socket for Asana Is Now Available

ReversingLabs
Agentic AI scales semiautonomous server attacks

Microsoft Security
The patch window is collapsing: Why security needs a new control plane

Offensive Security
Road to OSCE3: Episodio 1 – OSEP

SentinelOne
The Path to the Autonomous SOC: The Early Returns of AI & What It Means for Cybersecurity

Offensive Security
Knowing what not to attack

ISC SANS
Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)

GitGuardian
Agentic AI Security: Credentials and Permissions Define the Blast Radius

Dark Reading
Is Cyber Facing an Affordability Crisis?

PortSwigger
What's in a tag name? JavaScript, apparently

CISA Alerts & Advisories
FURUNO FA-50 Class B AIS Transponder

CISA Alerts & Advisories
Zoneminder

CISA Alerts & Advisories
A Tale of Two SOCs: Insights From Two Red Team Assessments

CISA Alerts & Advisories
PayRange API

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Aikido
Could OpenClaw have actually hacked that Australian gym? We decided to test it.

CISA Alerts & Advisories
Siemens SIMATIC IoT2050 Advanced

CISA News
CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response

CISA Alerts & Advisories
Bendix EC80 Brake ECU

CISA Alerts & Advisories
Ebyte NE2-D11

CISA Alerts & Advisories
Rently Smart Home

Malwarebytes
Grok fooled into stealing user chat, location data, and more

Offensive Security
CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability

Trail of Bits
State divergence enables unauthorized access

Schneier on Security
Black Hat State of Security Vendors

Malwarebytes
GTA 6 leak hunt could expose data belonging to thousands of Discord users

Talos Intelligence
The safety penalty: Reclaiming operational sovereignty in the age of AI

Malwarebytes
TikTok phishing: How to spot fake login and verification pages

Compass Security Blog
A Note on Pentesting Passkeys

Resecurity
CVE-2026-65400: macOS Screen Sharing Authentication Bypass Under Active Exploitation

TrustedSec
SpooNMAP Grows Up: Findings, Local LLM Detection, and a Whole Lot Less Waiting

Moonlock
Is OfferUp legit? How to spot 15 OfferUp scams and fake buyers

ISC SANS
ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)

Nick Mykhailyshyn
Plausible Analytics: Pre-Auth RCE, Cross-Tenant IDORs, and SSRF-to-RCE

Fastly
Level Up Your Security with Fastly API Enforcement

Datadog HQ
Golden Paths for AI agents: What changes when platform users aren’t human?

Auth0
Whatever You Are Building, Auth0 Has a Plan

Teleport Blog
Identity Everywhere: Bringing Infrastructure Identity to Agentic IT

Auth0
Auth0, Made for Whatever You Are Building

Elastic Security Labs
Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy

Sansec Threat Research
Shopware fixes Store API vulnerability allowing administrator takeover

Rosecurify
Seclog - #192

Semgrep
We benchmarked A LOT of models, here’s how they compare to Mythos


2026-08-24

Dark Reading
Exploited Zimbra Flaw Highlights Shrinking Window to Patch

Dark Reading
Foul Language: WordlistLoader Disguises Malware as Ordinary Text

Ars Technica Security
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed

Cloudflare
The Cloudflare Blog – Brought to you by EmDash

Meta Security
MetaRoCE: A New RDMA Transport Built for AI-Scale Ethernet

Meta Security
MTIA 300: Meta’s First Training Chip with Built-in NICs and Communication-Offloading Engines

Malwarebytes
Fake GTA 6 Extended Look and demo sites deliver an infostealer

Rapid7
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

Jericho
Q&A: Modernizing the National Vulnerability Database in the Age of Artificial Intelligence

Xint
XBOW vs. Xint

Dark Reading
Tricky 'SynkLoader' Multitool May Herald Ransomware

Malwarebytes
Fake Microsoft security scans trick victims into uninstalling their antivirus

Malwarebytes
What happens to your data when you die? (Lock and Code S07E17)

Dark Reading
ToxicPanda Banking Trojan Matures Into Enterprise Threat

Eaton Works
Tata’s B2B platform returned OTPs in API responses

Malwarebytes
AliExpress caught using silent audio to fingerprint visitors’ browsers

Dark Reading
The Vulnerability Gap: Why Discovery Is Outrunning Repair

Scott Helme
The ultimate road trip combo: Starlink Mini + UniFi Travel Router

Malwarebytes
ToxicPanda 2.0 can take over your Android phone and banking apps

XBOW
Threat Hunting with AI: Why it Matters and the Role of Autonomous Pentesting Tools

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Malwarebytes
Tracking PavinLoader across ClickFix and fake download campaigns

Aikido
How Aikido finds more vulnerabilities than Mythos at half the cost

Schneier on Security
Criminal Deception in Silicon Valley

Alex Schapiro
How a Blackstone real estate company exposed Social Security digits, dates of birth, addresses, and other applicant data through a GraphQL authorization flaw

Aikido
Shai-Hulud was the best thing to happen to supply chain security

ISC SANS
DOUBLECUP's PNG Payload, (Mon, Aug 24th)

Malwarebytes
A week in security (August 17 – August 23)

Socket
Open VSX Unblocks Extension IDs Used in Malware Campaign

Troy Hunt
Weekly Update 518: IoT Doorlock Nirvana with UniFi

ISC SANS
ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)

Datadog HQ
Monitor Azure Functions across every hosting plan with Datadog

Auth0
Branded Login URLs and Email Workflows for Production Auth

Auth0
Adding a UI to an Auth0-secured MCP server with Skybridge

Elastic Security Labs
How a team of entity maintainers monitors, connects and scores entities in Elastic Security


2026-08-23

Step Security
The State of Open Source Supply Chain Attacks

MaskRay's Blog
Block frequency

Troy Hunt
Welcoming the Sri Lankan Government to Have I Been Pwned


2026-08-22

Step Security
Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper