219 Security Blogs

Last Updated: 09 Sep 26 09:01 UTC

Blog List | Github | OPML

2026-11-12

Dark Reading
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI


2026-10-08

Dark Reading
[Virtual Event] Building a Secure AI Strategy for the Enterprise


2026-09-09

Malwarebytes
The push to stop algorithms controlling social media feeds has begun

MIT Technology Review
Understanding the thermal ceiling in portable power

MIT Technology Review
What OpenAI’s latest controversy tells us about the future of math

ISC SANS
ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)

Yunus Aydın
Family Link site engelini sonuna nokta koyarak atlatmak

Yunus Aydın
Bypassing Family Link’s website blocklist with a trailing dot


2026-09-08

Talos Intelligence
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Krebs on Security
Microsoft Plugs Nearly 1,000 Security Holes

Rapid7
Patch Tuesday - September 2026

Dark Reading
Patch Tuesday Sets Another Record With 974 CVEs

Ars Technica Security
Why this month's Microsoft patch release is a doozy

Dark Reading
Attackers Use Multi-Hop Google Redirects for Phishing Campaign

Dark Reading
OpenAI Agents Took Over Wiki Site Before Hugging Face Attack

ISC SANS
September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)

Aikido
Jason Haddix: Stop fearing AI pentesting

Zero Day Initiative
The September 2026 Security Update Review

Dark Reading
ClickFix Campaigns Abuse Legitimate Services for Persistent Access

Schneier on Security
AIs as Modern Genies

Aikido
Compromised Flutter package on pub.dev contains XCSSET malware

GitGuardian
Service Account Credential Rotation: The Blast-Radius Checklist

ReversingLabs
AI summary attack conceals code that tampers with LLMs

Cloudflare
Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)

Malwarebytes
Grindr settles HIV status data-sharing lawsuit for $35 million

MIT Technology Review
The Download: our 35 Innovators Under 35 this year

CISA Alerts & Advisories
CareCam Pro IP Cameras

CISA News
CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale Knowledge Distillation Campaigns to Shortcut AI Development

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies

Rapid7
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

MIT Technology Review
This founder is teaching chips how to recycle (their energy)

MIT Technology Review
This AI entrepreneur is developing agents that can plan ahead for the unexpected

MIT Technology Review
This founder is making cheaper, cleaner steel

MIT Technology Review
This geneticist’s age-reversal tech could help restore sight

Schneier on Security
Stealing AI Reasoning Traces

Talos Intelligence
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Talos Intelligence
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

Malwarebytes
MikroTik router flaws allow takeover without a password

ISC SANS
ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)

Auth0
Audit Your Auth0 Tenant with Auth0 Agent Skills

Rosecurify
Seclog - #194

Fastly
Accelerate Migrations: Introducing Direct Fetch for Fastly Object Storage

Datadog HQ
Coordinate product launches with Datadog


2026-09-07

Malwarebytes
Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)

GitGuardian
AI Created a Leaked Credentials Flood: Here's How We're Draining It

Malwarebytes
LG TV flaws could let attackers listen in, even in standby mode

MIT Technology Review
The Download: the hunt for underground hydrogen and more rogue OpenAI agents

Aikido
Shai-Hulud Rises From the Dead after 111 days

Aikido
StyleSmuggler fix: patch the Magento and Adobe Commerce RCE

Malwarebytes
Flirty OnlyFans promoters on X may be using AI to appear human

Schneier on Security
Automobile Camouflage to Hide from Flock Cameras

Scott Helme
No Hacking Required: The Manchester Airports Group Data Breach

Malwarebytes
A week in security (August 31 – September 6)

Infernux Blog
Log Horizon 0.9.0


2026-09-06

Troy Hunt
Weekly Update 520: The Unscripted Edition

ISC SANS
Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)

Infernux Blog
Drawing to understand


2026-09-05

ISC SANS
numbat - AI agent observability, (Fri, Sep 4th)

Sansec Threat Research
StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack


2026-09-04

Ars Technica Security
OpenAI agents discussed ways to escape their sandbox on public wiki

Schneier on Security
Friday Squid Blogging: Squid on a Stick at the New York State Fair

Microsoft Security
How to secure edge AI in customer-owned environments

MIT Technology Review
Architecting memory and storage in the AI era

Amazon Security
OSPAR 2026 report now available with 167 services in scope

Ars Technica Security
Once popular for attacking AI, ASCII smuggling is embraced by spammers

Malwarebytes
The hidden work of modernizing Malwarebytes

Socket
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing

Schneier on Security
Using a VM to Contain an AI Agent

Dark Reading
Companies Have 6 Months to Prepare for Automated Attacks

Aikido
Stop breaking SLAs: how to patch vulnerabilities before the fix even ships

Aikido
Top Trivy alternatives for container and cloud scanning in 2026

Dark Reading
AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

Malwarebytes
X Money rollout linked to password-reset attacks

Dark Reading
Insurers Search for Answers to Rein in Rogue AI

MIT Technology Review
The Download: selling battlefield drone data and AI reshaping language

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Rapid7
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

Schneier on Security
Security Vulnerability in a Voting System

Schneier on Security
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

Malwarebytes
Free streaming boxes may be routing criminal traffic through your home

Binarly
Top 10 Vulnerability Management Tools in 2026

Moonlock
This fake Apple Pay alert is designed specifically to fool iPhone users

Moonlock
New AI phishing kit is helping thieves unlock stolen iPhones and Macs

Moonlock
A hidden prompt could trick AI into leaking your private conversations

ISC SANS
ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)

Elastic Security Labs
Data access: the hidden cost of security vendor lock-in

Semgrep
Shift Right? After 20 Years of Shift Left?

Datadog HQ
Stop runtime threats with Workload Protection response actions

zerotistic
Hey Siri, welcome to my Minecraft server


2026-09-03

MalwareTech
Machine Speed is a lie: stop trying to fight AI with AI

Mend
Mend Renovate Enterprise: managing dependencies at agentic scale

Amazon Security
Incident response guide for AWS CloudTrail investigations – Part 2

Amazon Security
Incident response guide for AWS CloudTrail investigations – Part 1

Cloudflare
Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models

Dark Reading
Large Enterprises Targeted in Fake Merger & Acquisition Scams

Ars Technica Security
Confused about which VPN is right, US senator asks the NSA for guidance

Dark Reading
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?

Talos Intelligence
The story behind the intelligence

Aikido
MECCHA CHAMELEON can't hide from the RCE

Dark Reading
What the AI Warning Letter Completely Missed

Eclypsium
BTS #81 - Infratrust Pulse, AI's Role in Security

Malwarebytes
StreamRat Android malware spreads through Meta and TikTok ads

Meta Security
ZGateway: Learnings from Putting a Proxy in Front of ZippyDB

Microsoft Security
ASCII smuggling crosses over from AI prompt injection to phishing evasion

ReversingLabs
Best Enterprise File Scanning Tools of 2026

Dark Reading
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours

Silverfort
It’s the swan song of traditional PAM, and that’s good news for security

Bishop Fox Security
Signature Optional - Analysis of CVE-2026-28323

Red Siege InfoSec Blog
Improving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition

CISA Alerts & Advisories
Pyramid Solutions NetStaX EtherNet/IP Stack

CISA Alerts & Advisories
Preparing for the Post-Quantum Era: A Call to Action

CISA Alerts & Advisories
OPCFoundation OPC UA LocalDiscoveryServer (LDS)

CISA Alerts & Advisories
Inductive Automation Ignition

CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB2 (Update A)

CISA Alerts & Advisories
Rockwell Automation 1756-ENBT Module

CISA Alerts & Advisories
Rockwell Automation ArmorStart LT

CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB3

CISA Alerts & Advisories
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)

CISA Alerts & Advisories
IXON VPN Client

CISA Alerts & Advisories
Rockwell Automation ControlFLASH

Dark Reading
'Breeze Comet' Tears Into Brazilian & Global Financial Systems

Schneier on Security
Researching Employment Scams

Malwarebytes
Your phone or computer may soon ask how old you are

Hunt and Hackett
Recent cyberattacks show how little organisations really know during an incident

Compass Security Blog
CRA Reporting – What you need to know

TrustedSec
LLMHaxor Update

ISC SANS
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)

ISC SANS
ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)

Wiz
How Developers Prevent Production Risk at the Source

Datadog HQ
Build and run Datadog workflows from Bits Chat or AI agents

Auth0
Five Reasons Why Your Auth0 Permissions Are Not in your Access Token

Fastly
Building Fastly Log Analytics Tools: An Open-Source Approach to Deeper Insights

Teleport Blog
ISO 42001 Evidence: What Auditors Ask For

Fastly
CVE-2026-82329: JFrog Artifactory Authentication Bypass Exploitation Activity


2026-09-02

Microsoft Security
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Dark Reading
AI's Vulnerability Surge May Be More Manageable Than First Feared

Dark Reading
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

Amazon Security
Managing identity source transition for AWS IAM Identity Center

Ars Technica Security
I rented a car, and within hours, my driver's license was for sale

Dark Reading
AI Gives Cybercriminals a Dangerous Time Advantage

Binarly
Containers Don't Keep Secrets: Scanning Docker Hub for Leaked Credentials and Private Keys

Amazon Security
Agentic security: Detection and response at machine speed

Schneier on Security
AI Agents Are Now Emailing Me with Their Security Concerns

Rapid7
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Dark Reading
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users

Google Safety & Security
Our latest Linux Foundation Europe donation will build a more private digital world.

Malwarebytes
Tech support scams look different now. Here’s what to watch for

Eclypsium
Cybersecurity Insiders: AI Infrastructure’s Firmware Problem Is Bigger Than Any Single Vendor

Google Safety & Security
Proactive cyber defense for governments and enterprises

Jericho
Lazy Movie Headlines Are Lazy

GitGuardian
OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

ReversingLabs
Get the Spectra Assure Community Plugin for JFrog Artifactory

Palo Alto Networks
Building Securely From Day One: Palo Alto Networks Partners with the Zendesk Startup Program

The Citizen Lab
U.K. Supreme Court Opens Door for Spyware Victims to Sue Foreign States

Xint
Finding Bugs Isn’t Enough: The Difference Between Pointing LLMs to Find Bugs and a Mature AI AppSec Platform

core-jmp
Privilege Escalation from IIS AppPool to NT Authority/SYSTEM via AD CS RPC Endpoint

Malwarebytes
Scammers are getting smarter about where they target you 

CISA Alerts & Advisories
Communicating Under Pressure: Best Practices for Service Providers

CISA Alerts & Advisories
CISA Adds Seven Known Exploited Vulnerabilities to Catalog

core-jmp
CATAnA: Exploring the Dangers of SIM-Originating AT Commands in Cellular Devices

core-jmp
Proxmox VE 7.0–8.0.3: Unauthenticated Single-Request Root Auth Bypass (CVE-2023-54391)

Malwarebytes
Two critical Chrome flaws put users at risk on malicious websites

core-jmp
Singularity Rootkit: Evading Elastic Defend Module Load Detection

Ars Technica Security
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

Schneier on Security
Wireless Routers as Motion Detectors

Step Security
Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners

Step Security
Introducing deny list egress policies for Harden-Runner

Malwarebytes
153M+ driver’s licenses for sale on new dark web platform

Malwarebytes
Your AI chats could be used in court