Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• OpenSUpdater Hides in Recompiled 7zip SFX ↗ (opens in a new tab)

  G DATA Security Blog · Published 2026-09-24 · First collected 2026-10-24

• Hannibal Puts Autonomous Penetration Testing Under Your Control ↗ (opens in a new tab)

  Blog - Praetorian · Published 2026-09-23 · First collected 2026-10-24

• How One Twitch Chat Message Became Code Execution on a Streamer’s PC ↗ (opens in a new tab)

  SCRT Team Blog · Published 2026-09-22 · First collected 2026-10-24

• Below the Waterline Stage 1 - Red Team Planning ↗ (opens in a new tab)

  ZephrSec - Adventures In Information Security · Published 2026-09-20 · First collected 2026-10-24

• When IT Support Is the Attack: Defending Law Firms Against Silent Ransom Group ↗ (opens in a new tab)

  Sygnia · Published 2026-09-17 · First collected 2026-10-24

• Guarding Your Web: The Role of Security Headers ↗ (opens in a new tab)

  Art Resilia · Published 2026-09-17 · First collected 2026-10-24

• Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face ↗ (opens in a new tab)

  SentinelOne Labs · Published 2026-09-16 · First collected 2026-10-24

• The forgotten hardware: your security depends on your weakest link ↗ (opens in a new tab)

  Sicuranext Blog · Published 2026-09-15 · First collected 2026-10-24

• The DRM Flag That Isn’t DRM ↗ (opens in a new tab)

  Hack.Learn.Share · Published 2026-09-13 · First collected 2026-10-24

• Cyber Brief 26-09 - August 2026 ↗ (opens in a new tab)

  CERT-EU Threat Intelligence · Published 2026-09-03 · First collected 2026-10-24

• CRA Reporting – What you need to know ↗ (opens in a new tab)

  Compass Security Blog · Published 2026-09-03 · First collected 2026-10-24

• Welcome Benjamin Selyem! ↗ (opens in a new tab)

  Computer Security Group · Published 2026-08-31 · First collected 2026-10-24

• Llama.cpp, an Ice Cold CORS Light, and Command Execution - Put it on my Tab! ↗ (opens in a new tab)

  G3tSyst3m’s Infosec Blog · Published 2026-08-30 · First collected 2026-10-24

• MLTracer: Syscall-Based Malicious Model Detection and Labeling, with Static-Scanner Evasion Taxonomy ↗ (opens in a new tab)

  Binarly Research · Published 2026-08-29 · First collected 2026-10-24

• How to Avoid Telehealth Security and Privacy Risks ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-08-25 · First collected 2026-10-24

• Keeping Microsoft Office 2021 Secure For 3 More Years ↗ (opens in a new tab)

  0patch Blog · Published 2026-08-24 · First collected 2026-10-24

• InfraRed: How External Researchers Bring Tools into OST ↗ (opens in a new tab)

  Outflank · Published 2026-08-24 · First collected 2026-10-24

• Vibe coding: supply chain insights ↗ (opens in a new tab)

  DiabloHorn · Published 2026-08-23 · First collected 2026-10-24

• Detecting (Evil) Dylibs ↗ (opens in a new tab)

  Objective-See's Blog · Published 2026-08-23 · First collected 2026-10-24

• Compromising the Developer: How Modern Dependency Culture Reshaped the Supply Chain Threat Landscape ↗ (opens in a new tab)

  EclecticIQ Blog · Published 2026-08-17 · First collected 2026-10-24

• RISC-V: They Should Have Known Better ↗ (opens in a new tab)

  Dmitry.GR · Published 2026-08-16 · First collected 2026-10-24

• MathJax macro redefinition allows overriding built-in operators ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-08-14 · First collected 2026-10-24

• [tl;dr sec] #341 - Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements ↗ (opens in a new tab)

  tl;dr sec · Published 2026-08-13 · First collected 2026-10-24

• Is this hack-back or cyber letters-of-marque? ↗ (opens in a new tab)

  Cybersect · Published 2026-08-13 · First collected 2026-10-24

• Updated GPG key for signing Firefox and Thunderbird Releases ↗ (opens in a new tab)

  Mozilla Security Blog · Published 2026-08-10 · First collected 2026-10-24

• Registration Now Open for Augusta Cyber Week 2026! ↗ (opens in a new tab)

  Security Onion · Published 2026-08-06 · First collected 2026-10-24

• Trustfall: An RSA Heap Underwrite Into OP-TEE's Secure World ↗ (opens in a new tab)

  ByteRay Blog · Published 2026-08-06 · First collected 2026-10-24

• Workaround For Duplicate LVM Names ↗ (opens in a new tab)

  Righteous IT · Published 2026-08-03 · First collected 2026-10-24

• Fake Xeno Roblox Cheats Deliver Powerful Java Stealer Through Discord and Forums ↗ (opens in a new tab)

  Bitdefender Labs · Published 2026-08-03 · First collected 2026-10-24

• What cybersecurity experts are talking about in 2026 ↗ (opens in a new tab)

  Virus Bulletin – Vendor RSS · Published 2026-08-03 · First collected 2026-10-24