Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Bank of America GameStop Scam: Fake Fraud Alerts and the Safe Account Lie ↗ (opens in a new tab)

  MalwareTips Blog · Published 2026-10-25 · First collected 2026-10-25

• PHP2Shell and the end of the once-a-year pen test ↗ (opens in a new tab)

  Appknox Blog · Published 2026-10-25 · First collected 2026-10-25

• Smaller Share Size for Evolving Secret Sharing: General Thresholds and Threshold Three ↗ (opens in a new tab)

  IACR News · Published 2026-10-24 · First collected 2026-10-25

• Failed jamming of transcribers ↗ (opens in a new tab)

  DiabloHorn · Published 2026-10-24 · First collected 2026-10-24

• Capcom Data Breach Exposes 11.7 Million Email Addresses ↗ (opens in a new tab)

  Security Affairs · Published 2026-10-24 · First collected 2026-10-24

• OT Refrigeration Control Systems Attack ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - Threat Signal Report · Published 2026-10-24 · First collected 2026-10-24

• Three insights you may have missed from theCUBE’s coverage of Okta’s Oktane event ↗ (opens in a new tab)

  Security - SiliconANGLE · Published 2026-10-24 · First collected 2026-10-24

• How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944) ↗ (opens in a new tab)

  Vulnerabilities and Threat Research – Qualys Security Blog · Published 2026-10-24 · First collected 2026-10-24

• I Used Enterprise Threat Intelligence Tools to Prove a Website Isn’t Owned by Taylor Swift | UpGuard ↗ (opens in a new tab)

  UpGuard – Breaches · Published 2026-10-23 · First collected 2026-10-24

• Reported cyberattack disrupts Arizona Empowerment Scholarship Account vendors ↗ (opens in a new tab)

  DysruptionHub · Published 2026-10-23 · First collected 2026-10-24

• New OpenSSF Tech Talk: How Upstream Contribution Minimizes Technical Debt & Streamlines CRA Reporting ↗ (opens in a new tab)

  Open Source Security Foundation · Published 2026-10-23 · First collected 2026-10-24

• The Flashpoint Threat Intelligence Brief: Middle East ↗ (opens in a new tab)

  Threat Intelligence Blog | Flashpoint · Published 2026-10-23 · First collected 2026-10-24

• PHP2Shell: What This Week Tells Us About the Web We Built ↗ (opens in a new tab)

  Orca Security Blog · Published 2026-10-23 · First collected 2026-10-24

• Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication ↗ (opens in a new tab)

  SpecterOps · Published 2026-10-23 · First collected 2026-10-24

• Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters ↗ (opens in a new tab)

  KnowBe4 Blog · Published 2026-10-23 · First collected 2026-10-24

• Someone Will Click. Is Your Security Team Ready? ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-10-23 · First collected 2026-10-24

• PHP2Shell Operational Guidance ↗ (opens in a new tab)

  NVISO Labs · Published 2026-10-23 · First collected 2026-10-24

• Cloudflare Introduces a Faster TypeScript Compiler Written in Rust ↗ (opens in a new tab)

  Socket · Published 2026-10-23 · First collected 2026-10-24

• Email Security for Government: Reducing Risk Before the Inbox ↗ (opens in a new tab)

  OPSWAT Blog · Published 2026-10-23 · First collected 2026-10-24

• PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure ↗ (opens in a new tab)

  PortSwigger Blog · Published 2026-10-23 · First collected 2026-10-24

• A Protected Browser Doesn't Mean Your Enterprise Is Remediated ↗ (opens in a new tab)

  Sonatype Blog · Published 2026-10-23 · First collected 2026-10-24

• How to Export AWS CloudTrail Logs ↗ (opens in a new tab)

  SOC Prime Blog · Published 2026-10-23 · First collected 2026-10-24

• Resident Evil maker Capcom warns of phishing after 11.7 million records exposed ↗ (opens in a new tab)

  Malwarebytes · Published 2026-10-23 · First collected 2026-10-24

• Hacker leaks 281 GB of data from Germany’s far-right AfD party ↗ (opens in a new tab)

  GRAHAM CLULEY · Published 2026-10-23 · First collected 2026-10-24

• By our powers combined! ↗ (opens in a new tab)

  runZero Blog · Published 2026-10-23 · First collected 2026-10-24

• ISC Stormcast For Friday, October 23rd, 2026 https://isc.sans.edu/podcastdetail/10148, (Fri, Oct 23rd) ↗ (opens in a new tab)

  SANS Internet Storm Center · Published 2026-10-23 · First collected 2026-10-24

• Azure Firewall Security: How Routing Decisions Can Bypass Inspection ↗ (opens in a new tab)

  HackerNoon - cybersecurity · Published 2026-10-23 · First collected 2026-10-24

• What ARTEX Reveals About Overlooked Attack Surfaces ↗ (opens in a new tab)

  Akamai Blog · Published 2026-10-23 · First collected 2026-10-24

• Stop Treating Security Classification Guides Like Static Documents ↗ (opens in a new tab)

  Zscaler Research Blogs · Published 2026-10-23 · First collected 2026-10-24

• Risky Bulletin: Supply chain attack lets ransomware group inside 40 shipping companies ↗ (opens in a new tab)

  Risky Bulletin · Published 2026-10-23 · First collected 2026-10-24