2026-10-03
2026-10-02
Ars Technica Security
Apple changes full-disk access permissions to curb abuse from AI agents
Schneier on Security
Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing
Cloudflare
8 major updates to Cloudflare Observability
MIT Technology Review
Redefining enterprise intelligence with autonomous AI
Schneier on Security
Unidentified Flock Cameras in Florida
Dark Reading
Vulnerability Backlogs Are an Ownership Problem
Cloudflare
Introducing Web Search API via AI Gateway
MIT Technology Review
The Download: a biological de-aging contest and why LLMs don’t reason
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Schneier on Security
How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
Trail of Bits
SequenceHash: multihashing for the rest of us
Compass Security Blog
Pwn2Own Ireland 2025 – Home Assistant
MIT Technology Review
A new contest pits competitors against each other in a race to biological youth
core-jmp
Static Devirtualization of Tencent VM: ACE Kernel Drivers, CET, SEH, and Guided Symbolic Execution
core-jmp
Bypassing EDR with Local AI
MIT Technology Review
Don’t be fooled—LLMs don’t reason
Binary Security
Azure’s Weakest Link - Five Full Cross-Tenant Compromises
Socket
Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX
ISC SANS
ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)
Datadog HQ
Key metrics for monitoring Databricks
Datadog HQ
Databricks’ native monitoring resources
Datadog HQ
Monitor Databricks with Datadog
2026-10-01
Dark Reading
Alleged KillSec Ransomware Mastermind a 16-Year-Old
Ars Technica Security
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Offensive Security
Someone Clicked the Link. Is Your Security Team Ready?
Talos Intelligence
Give yourself room to be human
ReversingLabs
Why the smartest LLMs are not-so-smart pen testers
Microsoft Security
Insights from the 2026 Microsoft Digital Defense Report
Microsoft Security
Preparing governments for an era of interconnected cyber risk
Palo Alto Networks
Observability’s AI Moment
Bishop Fox Security
One Port to Root: Weaponizing Check Point Management CVE-2026-93616
Cloudflare
AI Search is now generally available
MIT Technology Review
The Download: AI “mind-reading” and creative uses for small batteries
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
Johnson Controls EasyIO Neo Series EC and CW Controllers
CISA Alerts & Advisories
CISA Malcolm
CISA Alerts & Advisories
Johnson Controls EasyIO Neo Series EC and CW Controllers
CISA Alerts & Advisories
Meari IoT Cloud Platform OpenAPI Service
CISA Alerts & Advisories
Monta monta.app
CISA Alerts & Advisories
Armatura LLC Armatura One
CISA Alerts & Advisories
ABB Protection and Control IED Manager PCM600
Schneier on Security
Connected Cars Are a Surveillance Platform
MIT Technology Review
An AI “mind-reading” tool can reconstruct what you’re looking at from a brain scan
Talos Intelligence
The Fine Art of Frustrating the Adversary
MIT Technology Review
How smaller, distributed batteries could help the grid
Resecurity
Session Cookie Authentication Bypass: Predictable Signing Secret Enableds Account Impersonations
Teleport Blog
SSO-Backed kubectl Access Across Many Clusters
Accomplish
Thinking Inside the Box
2026-09-30
Embrace The Red
From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)
Dark Reading
Trump, Tech Giants Strike Voluntary AI Safety Accord
Ars Technica Security
Attackers have been exploiting critical Zimbra flaw to steal emails
Dark Reading
As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
Step Security
Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
White Knight Labs
Automating AI Hacking with Tree of Attack
Jericho
September: The Screen Critic
Microsoft Security
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Bishop Fox Security
Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research
MIT Technology Review
The Download: OpenAI’s chief research officer explains its hacking response
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Ars Technica Security
Cloudflare plans to issue quantum-safe TLS certificates
Schneier on Security
I Want Better Reporting on AI Genie Behavior
MIT Technology Review
“We’re not going to shoot ourselves in the foot” over hack fallout, says OpenAI’s chief research officer
Talos Intelligence
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Palo Alto Networks
“SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust
Datadog HQ
How we built an async-aware Python profiler
2026-09-29
Microsoft Security
Phishing Abuses RMM Tools for Persistent Access
Palo Alto Networks
Introducing CLARA Agent: Instant Cloud & AI Risk Insights Available on Google Cloud Gemini Enterprise
Microsoft Security
Beyond source code: A path to the keys to the kingdom
ReversingLabs
Can advanced math make AI systems safer?
Bishop Fox Security
Zilliz / Attu | 2.6.5
MIT Technology Review
The Download: climate tech companies to watch and AI’s discovery problem
CISA Alerts & Advisories
Lantronix G520 Series Cellular Gateway
CISA Alerts & Advisories
MikroTik RouterOS
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
Toptech TMS7 and TopHAT
CISA Alerts & Advisories
Viidure Dashcam Android Application
CISA Alerts & Advisories
Anjvision YSSD-RTMP-H5
CISA Alerts & Advisories
VIVOTEK Camera Firmware
CISA Alerts & Advisories
Baicells Nova 430H
Schneier on Security
Using Device Linking to Eavesdrop on WhatsApp and Signal
Talos Intelligence
Securing the keys to the kingdom: Announcing Executive Threat Detection
Shielder Blog
louis-rs Security Audit
Palo Alto Networks
Why OT Resilience Is Now a Boardroom Imperative
Voidstar Security Research Blog
Following the Instructions: Live ARM Tracing with the ETM, ITM, and TPIU
Rosecurify
Seclog - #197
Elastic Security Labs
No MDM for Linux? A 68-line Elastic workflow keeps every endpoint's config current
2026-09-28
Github Security Blog
How we found 24 Android vulnerabilities using our open source AI security agent
Offensive Security
CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API
Krebs on Security
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Microsoft Security
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
GitGuardian
GitHub Copilot Security and Privacy Concerns: Understanding the Risks and Best Practices
Schneier on Security
New Attack Against RSA
watchTowr Labs
Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)
Palo Alto Networks
Securing AI Agents at Scale with NVIDIA
Malwarebytes
A week in security (September 21 – September 27)
Elastic Security Labs
Quarantined isn't contained: Agentic phishing response with Elastic and Sublime