2026-11-05
Step Security
CVE-2026-109518: apt Flaw Lets Attackers Swap Packages After Verification and Run Code as Root
MIT Technology Review
A new bill could change how the US builds energy infrastructure
Krebs on Security
Want to Rent an Internet Address at the White House?
2026-11-04
Ars Technica Security
Hackers exploited iOS and Android flaws to infect phones
MIT Technology Review
Texas was the new epicenter of the AI data center buildout. That might be kaput.
Embee Research
Informal Experiments with LLM's
MIT Technology Review
Roundtables: Inside the Quest for Cognitive Immortality
MIT Technology Review
What’s next for US energy policy after the midterm elections?
Ars Technica Security
Binance says hackers who stole billions in crypto spent months planning heist
Step Security
Malicious Files: Find What Supply Chain Attacks Leave Behind in Your GitHub Repositories and on Developer Machines
White Knight Labs
Exploiting PHP Foundational Vulnerabilities
Dark Reading
Incidents Move Too Fast for Pen & Paper
MIT Technology Review
The Download: blended meat, restored sight, and the agentic web
MIT Technology Review
Securing the agentic enterprise with data lineage
NVISO Labs
Detection Engineering: Implementing Detection-as-Code in an Existing Environment: Part 2 – Execution
Elastic Security Labs
Monitoring AI agent sessions: Leveraging embedding models to aid threat hunting and attack discovery workflows
Elastic Security Labs
When trust becomes the payload: Inside the threats, etc quarterly report
2026-11-03
Microsoft Security
Fake-download campaign uses trojanized installers to deliver monetization payloads
Ars Technica Security
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Microsoft Security
Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms
Ars Technica Security
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Bishop Fox Security
AI Findings are Cheap to Find & Costly to Trust
Google Safety & Security
Working collaboratively to fight scams in Asia Pacific
MIT Technology Review
The Download: controlling AI agents and “Super Intelligence” loyalty tests
Schneier on Security
AIs Hacking the Law
MIT Technology Review
How “reverse game theory” could keep AI agents in check
ToxSec
The One Person APT
Hunt and Hackett
Investigating BEC at two speeds
Compass Security Blog
Security Monitoring of AI Agents in Microsoft Defender XDR
MIT Technology Review
Here’s who is falling in line for Trump’s “Super Intelligence” loyalty test
Krebs on Security
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
2026-11-02
Microsoft Security
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Palo Alto Networks
New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agents
Amazon Security
Beyond DKIM key rotation: understanding email replay attacks
MIT Technology Review
Raising the quality of insights in agentic analytics
Palo Alto Networks
Guiding Customers Through Critical PHP Vulnerabilities
GitGuardian
Your Leaked Secrets Now Show Up in Wiz
Dark Reading
Microsoft's AI Risk Report Misses This Key Detail
Schneier on Security
AI Vulnerability Finding
Trail of Bits
Backporting security fixes at scale with Codex
Rapid7
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Malwarebytes
A week in security (October 26 – November 1)
ReversingLabs
The Sky Is Falling (Again): What PHP2Shell Says About AI, The Disclosure Process, and Security
Amazon Security
Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation
Infernux Blog
Log Baseline REST API and MCP server
Datadog HQ
Manage and deploy LLM prompts with Datadog
2026-11-01
Step Security
Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
Yunus Aydın
Sleep: Kodlama Ajanlarına Onaylanabilir Bellek
Yunus Aydın
Sleep: Reviewable Memory for Coding Agents
Rosecurify
Seclog - #202
2026-10-31
Talos Intelligence
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
Joshua Rogers
npm –ignore-scripts, yarn –version
2026-10-30
Ars Technica Security
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Schneier on Security
Friday Squid Blogging: Bigfin Squid Off California Coast
Microsoft Security
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Rapid7
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
Google Safety & Security
See who has access to your Gmail inbox in 2 minutes.
Schneier on Security
Bloatware in Aftermarket Auto Parts
Ars Technica Security
Hackers steal $6.3 billion from Binance in record crypto heist
Kevin Beaumont
Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide
Dark Reading
As Russia's Cyberwar Evolves, Belarus Steps Forward
Infernux Blog
Defender XDR - New custom detection rule fields
2026-10-29
Mozilla Security
Defending the patch gap against automated attackers
Dark Reading
Rethinking Cybersecurity Awareness in the AI Era
Dark Reading
Why CTF Competitions May Be More Important Than Ever
Talos Intelligence
A quiet week in infosec <.<
Eclypsium
Building Trusted AI Infrastructure
Include Security
Abliterated Models in Appsec Pentesting
Microsoft Security
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
Microsoft Security
Tracking AI adoption in North Korean threat actor tradecraft
Talos Intelligence
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
Bishop Fox Security
A Journey into Claude's Sandbox
Ars Technica Security
Massive leak exposes 41,000 DHS workers and undercover ICE agents
Eclypsium
Building Trusted AI Infrastructure