Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Welcome to the July 2026 Newsletter ↗ (opens in a new tab)
From your doorbell to your home network ↗ (opens in a new tab)
The Signs Were There: What the First Autonomous Ransomware Case Confirms ↗ (opens in a new tab)
Intelligence Insights: July 2026 ↗ (opens in a new tab)
Oh My Rogue Agent ↗ (opens in a new tab)
How Agentless Linux EDR Detects Rootkits Over SSH ↗ (opens in a new tab)
Hacking is Just Bugs ↗ (opens in a new tab)
Extracting creds with Foundation Model ↗ (opens in a new tab)
How Juno’s Ontology Reduces Hallucination | Uptycs ↗ (opens in a new tab)
ShadowICS: Detecting OT Sandboxes via Passive Industrial Traffic Monitoring ↗ (opens in a new tab)
I Wrote a New Book for Corelight ↗ (opens in a new tab)
Kexec & Btrfs Subvolumes for Kernel Testing ↗ (opens in a new tab)
sigstore.dev and Rekor evolution ↗ (opens in a new tab)
CVE-2025-64719: Git Pathspec Confusion Denial of Service in Gogs ↗ (opens in a new tab)
The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy ↗ (opens in a new tab)
IIS security best practices: How to secure an IIS server and web applications ↗ (opens in a new tab)
Quote: Edward de Bono “Complexity creates confusion….” ↗ (opens in a new tab)
RemotePE: The Lazarus RAT that lives in memory ↗ (opens in a new tab)
From a stale README to a security research intelligence platform ↗ (opens in a new tab)
Human Memory Management And Obsidian V2 ↗ (opens in a new tab)
CVE-2025-14299: TP-Link HTTP POST body DoS ↗ (opens in a new tab)
Reverse Engineering the AIR105 Bootrom - A Deep Dive into the MH1903S Boot Process ↗ (opens in a new tab)
Pentest autônomo com IA: exploração ofensiva real, em escala, para Web e APIs ↗ (opens in a new tab)
Detecting Malware via HTTPS Analysis ↗ (opens in a new tab)
Exposing a Russian Campaign Targeting Ukraine Using New Malware Duo: BadPaw and MeowMeow ↗ (opens in a new tab)
RTCon: Context-Adaptive Function-Level Fuzzing for RTOS Kernels ↗ (opens in a new tab)
Backdooring Electron Applications ↗ (opens in a new tab)
PCI DSS v4.0.1 for Payment Integrations: A Realistic Security-First Approach ↗ (opens in a new tab)
Five Years with Hugo ↗ (opens in a new tab)
Callback hell: abusing callbacks, tail-calls, and proxy frames to obfuscate the stack ↗ (opens in a new tab)