203 Security Blogs

Last Updated: 23 Jul 26 19:16 UTC

Blog List | Github | OPML

2026-07-23

Cloudflare
Introducing Cache Response Rules

Talos Intelligence
Don’t swing at everything

MIT Technology Review
Supercooled kidneys have been transplanted into pigs in a “landmark achievement”

Amazon Security
Enterprise security at machine speed: AWS Black Hat 2026 preview

Aikido
Better generic secrets detection starts with finding non-secrets

Github Security Blog
The case for a cooldown: Why Dependabot now waits before issuing version updates

ToxSec
GhostApproval: When the AI Approval Prompt Lies

Microsoft Security
Email threat landscape: Q2 2026 trends and insights

GitGuardian
Why identity-local signals and topology signals are two layers of the same blast radius

ISC SANS
When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd)

SentinelOne
Mount Here, Read There: Twin Path Traversal CVEs in Kubernetes Storage

Rapid7
What Happened Between OpenAI and Hugging Face?

MIT Technology Review
The Download: energy transmission and US threats against Chinese AI

CISA Alerts & Advisories
Johnson Controls C-CURE 9000 and Victor application server

CISA Alerts & Advisories
Weintek cMT3092X

CISA Alerts & Advisories
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite

CISA Alerts & Advisories
Johnson Controls XAAP Android

CISA Alerts & Advisories
MZ Automation libIEC61850

CISA Alerts & Advisories
MZ Automation lib60870

MIT Technology Review
How AI helps scientists design the next generation of medicines

CISA Alerts & Advisories
Panduit IntraVUE

CISA News
CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity

Rapid7
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Malwarebytes
Millions of cars could be tracked and unlocked by a hidden security flaw

Malwarebytes
WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw

Dark Reading
Agentic AI Challenges Progress in Confidential Computing

Schneier on Security
End-to-End Encryption and “Going Dark”

Offensive Security
The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?

Talos Intelligence
Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

Talos Intelligence
Preview: Cisco Talos at Black Hat USA 2026

Google Safety & Security
Introducing selfie for sign-in: a new, easy way to access your Google Account

MIT Technology Review
The power line that could reshape New York’s grid is hitting snags

Hunt and Hackett
Attackers do not need to break in, they simply log in

Dark Reading
Brazilian Banking Trojan Actively Spreading in Portugal

TrustedSec
CCPA Update: Who’s In Scope (Part 1)

ISC SANS
ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)

Dark Reading
Ransomware Attack Puts a Chill on Japanese Frozen-Food Chain

Step Security
Find Unused, Stale, and OIDC-Replaceable GitHub Actions Secrets Across Your GitHub Organization

Elastic Security Labs
wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution

Elastic Security Labs
How Elasticsearch ES|QL COMPLETION turns noisy curl and wget rules into high-fidelity cloud security alerts


2026-07-22

Dark Reading
Flaws in Passkey Implementation Show Old Attacks Still Work

Zero Salarium
PE OopsSec: Mind your PE, guard your OPSEC

Aikido
Finding eight high-severity vulnerabilities in NodeBB in six hours

Mend
199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Dark Reading
Attackers Are Learning to Live Off the AI Toolchain

Socket
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign

Dark Reading
Fake Bahrain Alert App Deploys Android Surveillance Malware

ISC SANS
Rondo Meets Geoserver, (Wed, Jul 22nd)

Ars Technica Security
OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face

Github Security Blog
Next chapter: Restructuring GitHub’s bug bounty program

Microsoft Security
Real world incident response: Microsoft and AXA XL strengthen cyber resilience

Dark Reading
When AI Attacks: OpenAI Models Autonomously Hack Hugging Face

Artem Golubin
Domain registration information should be transparent

Aikido
SQL injection isn't dead

SentinelOne
From Triage Grind to Strategic Operator: The New AI SOC Career Path

Wiz
Opening the Black Box: Agentless Threat Detection for Virtual Appliances

Xint
Xint Research: What Type of Security Flaws Does AI Code Produce?

NVISO Labs
Intercepting Android WebView traffic under new certificate validity requirement by Chromium

GitGuardian
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

Black Hills Info Sec
The Life of a SOC Analyst: Responsibilities, Challenges, and Strategies for Success

Searchlight Cyber
Preemptive Threat Exposure Management: Frequently Asked Questions

Eclypsium
Eclypsium Launches InfraTrust to Centralize Enterprise Hardware Security Risks

Eclypsium
Announcing InfraTrust, the source of intelligence on security risks across hardware infrastructure

Rapid7
What’s New in Rapid7 Products and Services: Q2 2026 in Review

Malwarebytes
Chick-fil-A loyalty accounts hijacked using stolen passwords

Searchlight Cyber
July 21st – This Week’s Top Cybersecurity and Dark Web Stories

MIT Technology Review
The Download: NASA’s new space telescope and OpenAI’s autonomous hacker

CISA News
CISA, FBI, EPA and U.S. Government Partners Update Warning of Iran-Affiliated Threat Actors Targeting Critical Infrastructure Programmable Logic Controllers

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Malwarebytes
Paidwork breach exposes data of 23 million users: Check if you’re affected

Dark Reading
EU Financial Institutions Leak Data Through Cookie Trackers

Schneier on Security
First-Person Identity Theft Story

Aikido
The upgrade trap: when upgrading is the wrong answer to a CVE

MIT Technology Review
Shape-shifting mirrors on NASA’s new space telescope could unveil Jupiters like our own

Eye Security
Beyond the Mythos Hype: What Specialised AI Models Can Do

Socket
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs

ISC SANS
ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)

Krebs on Security
LG to Ban Residential Proxies from Smart TV Apps

Himanshu Anand
Reporter 11: 10 people found the WPForms PayPal bug before me (CVE-2026-4986)

Datadog HQ
From zero to traces: Choosing the right APM instrumentation method for your stack

Fastly
The Google AI Deal No Publisher Wanted Just Handed Them Something Better: Clarity

Auth0
How to Set Up a Flask App with Cursor and the Auth0 Plugin

Datadog HQ
Unbiased Java CPU profiling with JFR in JDK 25


2026-07-21

Dark Reading
Ransomware Is Accelerating, but It's Not Because of AI

Dark Reading
Using LLMs to Find and Prioritize Vulnerabilities Is No Easy Task

Aikido
Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust you

Dark Reading
Hacker Turns AI Jailbreaks Into Offensive Attack Platform

Black Lantern Security
CVE-2026-12118 - IBM webMethods Integration Server: Pre-Auth RCE via WmServiceMock

Zero Day Initiative
Pwn2Own Ireland 2026 – New Targets and Categories

Héber Júlio
OSCP — The Good, Very Good, and the Bad

Amazon Security
Do more with AWS WAF labels using dynamic label interpolation

GitGuardian
How to Measure Time to Revoke for Exposed Credentials

Bishop Fox Security
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit

Malwarebytes
What happens if you visit a WordPress site hacked through wp2shell?

ISC SANS
Captive Portal Detection, (Tue, Jul 21st)

Wiz
Agentless Threat Detection: Illuminating Cloud Blind Spots

Ars Technica Security
Apps targeted at US troops contain Chinese and Russian code

JFrog
The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

Dark Reading
Choose Wisely: AI-Generated Coding Risk Varies, a Lot

Cloudflare
How the 2026 World Cup affected Internet traffic

Wiz
300 WINtegrations Strong: An Open Security Ecosystem Built for the Speed of AI

MIT Technology Review
The Download: Chinese AI divides the White House, and a record copyright payout

CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW

CISA Alerts & Advisories
Rockwell Automation ThinManager

CISA Alerts & Advisories
Rockwell Automation 1718-AENTR/1719-AENTR

CISA Alerts & Advisories
Siemens Opcenter X

CISA Alerts & Advisories
Siemens SIDIS Secured SmartPlug

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Alerts & Advisories
Tycon Systems TPDIN-Monitor-WEB2

CISA Alerts & Advisories
Siemens CADRA

CISA Alerts & Advisories
Rockwell Automation Studio 5000 Logix Designer

CISA Alerts & Advisories
Siemens IAM Client

CISA Alerts & Advisories
Rockwell Automation 1734 POINT I/O

CISA Alerts & Advisories
Rockwell Automation FactoryTalk Services Platform

Malwarebytes
New ClickLock Stealer locks your Mac until you hand over your password

Malwarebytes
Don’t trust that “FBI agent” in your DMs

Schneier on Security
MIT to Become Hotbed of AI Video Surveillance

Escape DAST
wp2shell (CVE-2026-63030 + CVE-2026-60137): WordPress pre-auth RCE, now detected by Escape

MIT Technology Review
Advancing next-gen AI with materials science innovation

Sicuranext Blog
Patching WP2Shell in the dark using PAI

Sicuranext Blog
Patching WP2Shell in the dark using PAI

Malwarebytes
AI nudify apps spark legal scrutiny of Apple and Google’s profits

Troy Hunt
Weekly Update 513: Clauding The Home Network

Compass Security Blog
The Hidden Privilege of Automation Platforms

TrustedSec
The New Hotness in Phishing: Device Code Attacks in M365

ISC SANS
ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)

Teleport Blog
Identity Security for AI

Greynoise
Now Available: Intelligence Dashboard in the GreyNoise Platform


2026-07-20

Filippo Valsorda
Opaque, Interoperable Passkey Records (and a Go API)

Amazon Security
Introducing the Amazon GuardDuty investigation agent: on-demand AI-powered threat assessment

Dark Reading
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

Cloudflare
Cloudflare Internal DNS is now generally available

Dark Reading
Remediating Vulnerabilities With LLMs: Inside Ivanti's Automation Push

Dark Reading
25 Years After Code Red: What the Worm Era Can Teach Us About AI Security

Dark Reading
CISOs Feel the Heat Over AI Risk

ISC SANS
WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)

Dark Reading
Attackers Combo Up Evasion Tactics for BEC Phishing

Wiz
Exploitation in the Wild of wp2shell

MIT Technology Review
China’s AI models have Trump’s AI world at war with itself

Amazon Security
2026 ISO and CSA STAR certificates are now available with two additional services

Aikido
What developers need to know about DSPM and data exposure in code

Moonlock
Why does my search keep switching to Yahoo, and what is the Yahoo virus?

Malwarebytes
The Odyssey piracy scams appear within hours of the movie’s release

Xint
Xint Code Discovers Three High Sev Bugs in Android

Exodus Blog
Dnsmasq DNS Remote Heap Buffer Overflow

Malwarebytes
Healthcare giant Abbott probes two cyber incidents amid extortion claims

Ars Technica Security
Pay up or not? Ransomware surge has victims facing tough choices.

Dark Reading
Cybersecurity Keeps Events 'Uneventful'

SentinelOne
The Agentic SOC: Transforming Data into Defensive Velocity

Rapid7
From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab

MIT Technology Review
The Download: AI hiring biases, and weather data sabotage

Escape DAST
Best AI DAST tools in 2026: ranked, compared, and reviewed for enterprise security teams

Schneier on Security
On Flock License Plate Tracking Cameras

Malwarebytes
Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding

Malwarebytes
A week in security (July 13 – July 19)

ISC SANS
ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)

Embrace The Red
Autonomous AI Intrusions Are Here: Lessons from the Hugging Face Compromise

Datadog HQ
Use OpenTelemetry-native observability with Datadog from ingestion to investigation

Fastly
Delivering A Resilient World Cup Final

Rosecurify
Seclog - #187


2026-07-19

Eye Security Research
wp2shell: incident response guide (CVE-2026-63030 + CVE-2026-60137)

Step Security
SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor

Bad Privacy
Should Canada’s Government Be More Transparent About the Slippery Slope of Enforcing Digital ID?

Moonlock
Can a factory reset remove a virus or other malware?

ISC SANS
Scans for Hikvision Intelligent Security API, (Sun, Jul 19th)

ToxSec
Context Bombs: Defensive Prompt Injection Traps

Aikido
SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts

Project Black
Should I Domain Join Backup Servers?

Hacktron
Could Modern Code Review Have Prevented wp2shell?

Keowu Blog's
Lelouch: Engenharia Reversa de uma SJCAM Action Camera com firmware proprietário baseado no Android e Reescrevendo um CFW completamente OpenSource

Keowu Blog's
Lelouch: Reverse Engineering of an SJCAM Action Camera with proprietary Android-based firmware and Rewriting a completely OpenSource CFW


2026-07-18

Jericho
Review: A Natural History of Empty Lots by Christopher Brown

Resecurity
From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks

Elastic Security Labs
New North Korean campaign uses fake coding interviews to steal developer credentials


2026-07-17

Rapid7
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

Cloudflare
Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities

Aikido
Unauthenticated RCE in WordPress core (wp2shell), via SQL injection

Schneier on Security
Friday Squid Blogging: Squid Washing Up on Cape Cod Beach

Dark Reading
Inc Ransomware Exploits SonicWall SMA Zero-Days

Rapid7
Metasploit Wrap Up: An HTTP to SMB relay plus Payload Improvements

Rapid7
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

The Citizen Lab
US Military Smartphones Targeted Through Roaming and Ad Tech

Dark Reading
The Real AI Threat Is Blind Trust

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 29

Aikido
Top Pentera alternatives for automated penetration testing

Microsoft Security
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks

Searchlight Cyber
Attack Surface Management FAQ: Expert Answers to Common Security Questions

Bishop Fox Security
Using MCP Agents for Penetration Testing

Dark Reading
Gold Eagle Clearinghouse Targets Security Gap, But How Is Unclear

Malwarebytes
Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

Dark Reading
Google Bets 'Agentic Defense' Strategy Can Outpace Attackers

Schneier on Security
Details of Alan Turing’s Voice Encryption System

Malwarebytes
How to use GitHub safely

Socket
White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities

Moonlock
Sugar daddy and sugar baby scams: Signs, tactics, and recovery steps

Moonlock
New campaign by North Korea-linked hackers is targeting developers

Moonlock
Novel Java-based trojan QuimaRAT is targeting Macs

Moonlock
12 Craigslist scams: Here’s how to buy and sell safely

Moonlock
How to spot an Apple ID scam and what to do if you fall for one

ISC SANS
ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)

Teleport Blog
Securing kubectl on Remote Kubernetes Clusters Without Static Credentials or VPNs

Datadog HQ
How we brought agentic workflows to Cloud SIEM with the Datadog MCP Server

Fastly
Mapping the Beautiful Game: How the World Cup Reshapes U.S. Internet Traffic

Datadog HQ
Answer any cost question faster with the Cloud Cost skill in Bits Chat


2026-07-16

Microsoft Security
ACR Stealer: Two observed intrusion chains amid increased threat activity

Dark Reading
Agentic AI: Taming the Unpredictable

Dark Reading
1M+ Emails Use Hidden Text to Dupe AI Security Filters

Ars Technica Security
Now, even Russia's most elite hackers are using Clickfix to infect devices