134 Security Blogs

Last Updated: 16 Jun 25 22:17 UTC

Blog List | Github | OPML

2025-06-16

Malwarebytes
The data on denying social media for kids (re-air) (Lock and Code S06E12)

Malwarebytes
A week in security (June 9 – June 15)

Auth0
What Is Relationship-based access control (ReBAC)?

Moonlock
FBI warns: BADBOX malware is after your smart TV

Ars Technica Security
Vandals cut fiber-optic lines, causing outage for Spectrum Internet subscribers

Amazon Security
How AWS improves active defense to empower customers

The Citizen Lab
Unspoken Implications: A Preliminary Analysis of Bill C-2 and Canada’s Potential Data-Sharing Obligations Towards the United States and Other Countries

Dark Reading
Malicious Chimera Turns Larcenous on Python Package Index

Dark Reading
Anubis Ransomware-as-a-Service Kit Adds Data Wiper

Dark Reading
Washington Post Staffer Emails Targeted in Cyber Breach

Dark Reading
'Water Curse' Targets Infosec Pros via Poisoned GitHub Repositories

Dark Reading
Security Is Only as Strong as the Weakest Third-Party Link

Dark Reading
NIST Outlines Real-World Zero-Trust Examples


2025-06-15

Schneier on Security
Upcoming Speaking Engagements

SentinelOne
Redefining Fatherhood: How SentinelOne Dads Are Leading At Work & At Home

Snyk
Why ANZ Technology Leaders Are Rethinking How AI, Speed, and Security Intersect


2025-06-14

itm4n's Blog
Offline Extraction of Symantec Account Connectivity Credentials (ACCs)


2025-06-13

Schneier on Security
Friday Squid Blogging: Stubby Squid

Schneier on Security
Paragon Spyware Used to Spy on European Journalists

Malwarebytes
Your Meta AI chats might be public, and it’s not a bug

Auth0
B2B SaaS Identity Challenges: The Foundation

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 24

Eclypsium
Secure Device Lifecycle Management

Google Safety & Security
An age assurance tool for Europe and beyond

Moonlock
How secure is the new macOS Tahoe? Here are our concerns

Amazon Security
How to create post-quantum signatures using AWS KMS and ML-DSA

Amazon Security
AI security strategies from Amazon and the CIA: Insights from AWS Summit Washington, DC

Amazon Security
AWS CIRT announces the launch of the Threat Technique Catalog for AWS

Google Security Blog
Mitigating prompt injection attacks with a layered defense strategy

Searchlight Cyber
Cartier Confirms Data Breach and Warns Customers They Could Become Targets

Mend
Shadow AI: Examples, Risks, and 8 Ways to Mitigate Them

Dark Reading
CISA Reveals 'Pattern' of Ransomware Attacks Against SimpleHelp RMM

Dark Reading
Threat Actor Abuses TeamFiltration for Entra ID Account Takeovers

Dark Reading
Why CISOs Must Align Business Objectives & Cybersecurity

Dark Reading
Cyberattacks on Humanitarian Orgs Jump Worldwide

Palo Alto Networks
The New AI Attack Surface — How Cortex Cloud Secures MCP

TrustedSec
Dragging Secrets Out of Chrome: NTLM Hash Leaks via File URLs


2025-06-12

Schneier on Security
Airlines Secretly Selling Passenger Data to the Government

Microsoft Security
Cyber resilience begins before the crisis

Cloudflare
Cloudflare service outage June 12, 2025

Cloudflare
Celebrating 11 years of Project Galileo’s global impact

Elastic Security Labs
Call Stacks: No More Free Passes For Malware

Troy Hunt
Weekly Update 456

Talos Intelligence
Know thyself, know thy environment

Offensive Security
CVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluence

Offensive Security
CVE‑2025‑49113 – Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization

Eclypsium
Securing AI Data Centers

Eclypsium
Even More Holes In Your Boot: Critical UEFI Secure Boot Bypass Vulnerabilities

Datadog HQ
Datadog + OpenAI: Codex CLI integration for AI‑assisted DevOps

Ars Technica Security
Coming to Apple OSes: A seamless, secure way to import and export passkeys

Amazon Security
Introducing the AWS Security Champion Knowledge Path and digital badge

The Citizen Lab
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted

Sansec Threat Research
Adobe patches critical Magento admin takeover via menu injection

ReversingLabs
Accelerate PQC Migration: How to Leverage CBOMs for Cryptographic Asset Discovery

Krebs on Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs

Mend
Kubernetes Security Risks and Critical Best Practices

Dark Reading
Researchers Detail Zero-Click Copilot Exploit 'EchoLeak'

Dark Reading
New COPPA Rules to Take Effect Over Child Data Privacy Concerns

Dark Reading
Hacking the Hackers: When Bad Guys Let Their Guard Down

Dark Reading
Foundations of Cybersecurity: Reassessing What Matters

Palo Alto Networks
See How We’re Fortifying Cloud and AI at AWS re:Inforce 2025

TrustedSec
Hunting Deserialization Vulnerabilities With Claude


2025-06-11

Fastly
DDoS in May

Malwarebytes
US airline industry quietly selling flight data to DHS

Malwarebytes
23andMe raked by Congress on privacy, sale of genetic data

Cloudflare
We shipped FinalizationRegistry in Workers: why you should never use it

Talos Intelligence
catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities

Project Black
FileFlows SQL Injection by Decompiling .NET Code

Datadog HQ
Build, test, and scale detections as code with Datadog Cloud SIEM

Amazon Security
AWS completes Police-Assured Secure Facilities (PASF) audit in Europe (London) AWS Region

Black Lantern Security
Doomla! Zero Days

Synacktiv
NTLM reflection is dead, long live NTLM reflection! – An in-depth analysis of CVE-2025-33073

ReversingLabs
DoD issues new marching orders on secure software and SBOMs

Redteam-Pentesting.de
A Look in the Mirror - The Reflective Kerberos Relay Attack

Searchlight Cyber
Why is Attack Surface Management Now Worth the Cost?

Krebs on Security
Patch Tuesday, June 2025 Edition

Dark Reading
Infostealer Ring Bust-up Takes Down 20,000 Malicious IPs

Dark Reading
ConnectWise to Rotate Code-Signing Certificates

Dark Reading
Agentic AI Takes Over Gartner's SRM Summit

Dark Reading
Google Bug Allowed Brute-Forcing of Any User Phone Number

Dark Reading
Securonix Acquires Threat Intelligence Firm ThreatQuotient

Dark Reading
Security Pitfalls & Solutions of Multiregion Cloud Architectures

Dark Reading
Mirai Botnets Exploit Flaw in Wazuh Security Platform

Dark Reading
India's Security Leaders Struggle to Keep Up With Threats

Snyk
Finding Software Flaws Early in the Development Process Provides Clear ROI

Snyk
Build Fast, Stay Secure: Guardrails for AI Coding Assistants

Snyk
Transform Your AppSec Program With the Power of Snyk Analytics


2025-06-10

Fastly
CISO Perspective: Q1 2025 Threat Insights Report

Malwarebytes
GirlsDoPorn owner faces life in jail after pleading guilty to sex trafficking

Malwarebytes
44% of people encounter a mobile scam every single day, Malwarebytes finds

Malwarebytes
Google bug allowed phone number of almost any user to be discovered

itm4n's Blog
Checking for Symantec Account Connectivity Credentials (ACCs) with PrivescCheck

Rapid7
Patch Tuesday - June 2025

Rapid7
BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict

Rapid7
Key Takeaways from the Take Command Summit 2025: Demystifying Cloud Detection & Response – The Future of SOC and MDR

Talos Intelligence
Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities

White Knight Labs
Understanding Double Free in Windows Kernel Drivers

Eclypsium
Leading Cloud Computing Company Relies on Eclypsium to Protect AI Data Center Infrastructure

Eclypsium
The Ultimate Guide to AI Data Center Infrastructure Security

Eclypsium
GenAI Compute Infrastructure Under Siege: Defending the Foundation of AI

Eclypsium
AI Data Centers: The Cyber Target of the Century

Eclypsium
Eclypsium Secures AI Data Centers as AI Arms Race Escalates

Eclypsium
AI is Critical Infrastructure: Securing the Foundation of the Global Future

Datadog HQ
Optimize and troubleshoot AI infrastructure with Datadog GPU Monitoring

Datadog HQ
Ensure trust across the entire data life cycle with Datadog Data Observability

Datadog HQ
Datadog MCP Server: Connect your AI agents to Datadog tools and context

Datadog HQ
Automate Cloud SIEM investigations with Bits AI Security Analyst

Datadog HQ
Improve performance and reliability with Proactive App Recommendations

Datadog HQ
Automatically identify issues and generate fixes with the Bits AI Dev Agent

Datadog HQ
Introducing Bits AI SRE, your AI on-call teammate

Datadog HQ
Debug live production issues with the Datadog Cursor extension

Datadog HQ
Unify remediation and communication with Datadog Incident Response

Datadog HQ
Monitor, troubleshoot, and improve agentic systems with Datadog

Datadog HQ
Monitor your OpenAI agents with Datadog LLM Observability

Datadog HQ
Rightsize workloads and reduce costs with Datadog Kubernetes Autoscaling

Datadog HQ
Make data-driven design decisions with Product Analytics

Datadog HQ
Store and analyze high-volume logs efficiently with Flex Logs

Datadog HQ
Explore your data with Sheets, DDSQL Editor, and Notebooks for advanced analysis in Datadog

Datadog HQ
Search your historical logs more efficiently with Datadog Archive Search

Datadog HQ
Send Azure logs to Datadog faster and more easily with automated log forwarding

Datadog HQ
Detect anomalies beyond spikes and new values with Content Anomaly Detection in Cloud SIEM

Datadog HQ
DASH 2025 Act & Automate: Guide to Datadog's newest announcements

Datadog HQ
DASH 2025: Guide to Datadog's newest announcements

Datadog HQ
DASH 2025 Observe & Analyze: Guide to Datadog's newest announcements

Datadog HQ
DASH 2025 Secure & Govern: Guide to Datadog's newest announcements

Datadog HQ
Detect and investigate query regressions with Datadog Database Monitoring

Datadog HQ
Detect issues and optimize spend with Databricks serverless job monitoring

Datadog HQ
Protect the life cycle of your application code and libraries with Datadog Code Security

Datadog HQ
Accelerate Oracle Cloud Infrastructure monitoring with Datadog OCI QuickStart

Datadog HQ
Proactively enforce infrastructure best practices with Datadog Resource Policies

Datadog HQ
Visualize cloud security relationships with Datadog Security Graph

Datadog HQ
Detect Amazon Bedrock misconfigurations with Datadog Cloud Security

Datadog HQ
Building on open source IaC scanning tools with Datadog

Datadog HQ
Track engineering metrics with customizable, executive-ready reports in Datadog’s IDP

Datadog HQ
Ship software quickly and confidently with Datadog IDP

Datadog HQ
Accelerate Kubernetes issue resolution with AI-powered guided remediation

Datadog HQ
Create and monitor LLM experiments with Datadog

Datadog HQ
Monitor and optimize your Flex Logs compute usage

Datadog HQ
Security and SRE: How we implemented our combined approach

Datadog HQ
Find what's driving errors and latency with Tag Analysis

Datadog HQ
Reduce cloud storage costs and improve operational efficiency with Datadog Storage Monitoring

Trail of Bits
What we learned reviewing one of the first DKLs23 libraries from Silence Laboratories

Ars Technica Security
Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.

Amazon Security
Building identity-first security: A guide to the Identity and Access Management track at AWS re:Inforce 2025

Binarly
Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass

Synacktiv
Exploiting Heroes of Might and Magic V

ReversingLabs
Chat Playground project lets security teams toy with gen AI

Compass Security Blog
LinkedIn for OSINT: tips and tricks

Mend
The Growing Challenge of Shadow MCP: Unauthorized AI Connectivity in Your Codebase

Dark Reading
Stealth Falcon APT Exploits Microsoft RCE Zero-Day in Mideast

Dark Reading
Bridging the Secure Access Gap in Third-Party, Unmanaged Devices

Dark Reading
PoC Code Escalates Roundcube Vuln Threat

Dark Reading
Red Canary Expands AI Innovations to Cut Alert Overload

Dark Reading
GitHub: How Code Provenance Can Prevent Supply Chain Attacks

Dark Reading
United Natural Food's Operations Limp Through Cybersecurity Incident

Dark Reading
Poisoned npm Packages Disguised as Utilities Aim for System Wipeout

Dark Reading
SSH Keys: The Most Powerful Credential You're Probably Ignoring

Sicuranext Blog
Influencing LLM Output using logprobs and Token Distribution

Sicuranext Blog
Influencing LLM Output using logprobs and Token Distribution

Zero Day Initiative
The June 2025 Security Update Review

TrustedSec
Common Mobile Device Threat Vectors


2025-06-09

Palo Alto Networks
Securing AI Agent Innovation with Prisma AIRS MCP Server