Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• GitHub’s model for secret detection: Finding more secrets with less noise ↗ (opens in a new tab)

  The GitHub Blog: Security News and Updates · Published 2026-10-13 · First collected 2026-10-24

• Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113) ↗ (opens in a new tab)

  Bishopfox · Published 2026-10-13 · First collected 2026-10-24

• On the front lines of a breach with Cisco Talos Incident Response ↗ (opens in a new tab)

  Cisco Newsroom: Security · Published 2026-10-13 · First collected 2026-10-24

• Agents Are Acting. Most Organizations Cannot Stop Them. ↗ (opens in a new tab)

  Salt Security Blog · Published 2026-10-13 · First collected 2026-10-24

• Introducing macOS Mirage: Next-Generation Apple Silicon Dynamic Analysis and Sigma Detections ↗ (opens in a new tab)

  VirusTotal Blog · Published 2026-10-13 · First collected 2026-10-24

• “Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations ↗ (opens in a new tab)

  Cyble · Published 2026-10-13 · First collected 2026-10-24

• WEEKLY ALL-SOURCE ESPIONAGE INTELLIGENCE BRIEF 10.12.26 ↗ (opens in a new tab)

  Krypt3ia · Published 2026-10-13 · First collected 2026-10-24

• Breach of Confidence: 12 October 2026 ↗ (opens in a new tab)

  Javvad Malik · Published 2026-10-13 · First collected 2026-10-24

• Why Cybersecurity Awareness Month still comes back to the basics ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-10-13 · First collected 2026-10-24

• Corellium MATRIX™ Automates Mobile AppSec Testing | Webinar ↗ (opens in a new tab)

  Corellium Blog · Published 2026-10-12 · First collected 2026-10-24

• 12th October – Threat Intelligence Report ↗ (opens in a new tab)

  Check Point Research · Published 2026-10-12 · First collected 2026-10-24

• Hermes Agent - PKCE Session Takeover via Redirect-URI Parser Confusion ↗ (opens in a new tab)

  Tenable Research Advisories · Published 2026-10-09 · First collected 2026-10-24

• 6 alternatives to Blackpoint for your shortlist ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-10-08 · First collected 2026-10-24

• Spike in Attacks Targeting Digital Video Recorders in Ukraine ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-10-08 · First collected 2026-10-24

• Inside PhantomPolia: Remus Stealer Delivery via Donut Shellcode in ClickFix Campaign ↗ (opens in a new tab)

  LevelBlue (SpiderLabs Blog) · Published 2026-10-07 · First collected 2026-10-24

• Why you can’t afford to ignore supply chain security ↗ (opens in a new tab)

  BH Consulting · Published 2026-10-07 · First collected 2026-10-24

• What's on that Access Port? ↗ (opens in a new tab)

  Daniel Mangum · Published 2026-10-07 · First collected 2026-10-24

• WordPress 7.1.3 Maintenance and Security Release ↗ (opens in a new tab)

  Security – WordPress News · Published 2026-10-06 · First collected 2026-10-24

• Update on Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: Expanded THOR Detection Coverage ↗ (opens in a new tab)

  Nextron Systems · Published 2026-10-06 · First collected 2026-10-24

• Stormshield announces the appointment of Christophe Canguilhem to succeed Pierre-Yves Hentzen as Head of the company ↗ (opens in a new tab)

  Stormshield · Published 2026-10-05 · First collected 2026-10-24

• SSH Password Harvesting with eBPF ↗ (opens in a new tab)

  jm33_ng · Published 2026-10-04 · First collected 2026-10-24

• Session Cookie Authentication Bypass: Predictable Signing Secret Enableds Account Impersonations ↗ (opens in a new tab)

  Resecurity · Published 2026-10-01 · First collected 2026-10-24

• Secure SDLC for Embedded Devices: A Practical Guide ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-10-01 · First collected 2026-10-24

• Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control ↗ (opens in a new tab)

  Blog RSS Feed | Snyk · Published 2026-09-30 · First collected 2026-10-24

• Winner, Name that Ware August 2026 ↗ (opens in a new tab)

  bunnie's blog · Published 2026-09-29 · First collected 2026-10-24

• Insiders for Hire: How the Underground Market for Employee Access is Evolving Insider Risks ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-09-29 · First collected 2026-10-24

• The Developer is the New Perimeter: How Supply Chain Attacks Are Becoming Cloud Breaches ↗ (opens in a new tab)

  Vulnerabilities and Threat Research – Qualys Security Blog · Published 2026-09-28 · First collected 2026-10-24

• From EDU Account Takeover to Job Scam Abuse: West African Fraud Actors Target Universities ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-09-28 · First collected 2026-10-24

• MGDefender: Scan-Cycle-Aware PLC Protection Through Embedded Virtualization and Lightweight I/O Anomaly Detection ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-28 · First collected 2026-10-24

• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-09-24 · First collected 2026-10-24