Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Snapchat Scams You Should Know and How to Stop Them ↗ (opens in a new tab)
Explorando GraphQL: Do Zero à Exposição de Milhares de Dados ↗ (opens in a new tab)
OneDrive Updates ↗ (opens in a new tab)
DIANNA Explains 4: Nimbus Manticore—Monstrous Malware ↗ (opens in a new tab)
What Did We Learn from the NCSC’s 2025 Annual Review? ↗ (opens in a new tab)
Multnomah County Court Text Scam: The Fake Notice With a Payment QR Code ↗ (opens in a new tab)
Mutual Correlated Agreement and List-Decoding: Improvements and Separations ↗ (opens in a new tab)
Capcom Data Breach Exposes 11.7 Million Email Addresses ↗ (opens in a new tab)
University Hospitals in Ohio takes systems offline after suspicious server activity ↗ (opens in a new tab)
How to Export the Microsoft 365 Unified Audit Log ↗ (opens in a new tab)
The Next Cybersecurity Frontier Is Better Collaboration, Not Better Detection ↗ (opens in a new tab)
MetaDefender™ Endpoint v7.6.2610 Release ↗ (opens in a new tab)
When Certificate Trust Breaks: Why TLS Inspection Is an Enterprise Safety Net ↗ (opens in a new tab)
Facebook’s misleading privacy claims land Meta a $25 billion penalty ↗ (opens in a new tab)
DOQEX Achieves Cyber Essentials Certification to Strengthen Security Standards ↗ (opens in a new tab)
Understanding PHP2Shell: Everything You Need to Know ↗ (opens in a new tab)
Warning: Calendly Phishing Pages Are Targeting Job Seekers ↗ (opens in a new tab)
ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd) ↗ (opens in a new tab)
OSCP+ Scoring Update: What You Need to Know ↗ (opens in a new tab)
eMudhra CA Incident: Sonatype's Assessment and Guidance ↗ (opens in a new tab)
Two critical RCEs in PHP core ↗ (opens in a new tab)
PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment ↗ (opens in a new tab)
Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware ↗ (opens in a new tab)
Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns ↗ (opens in a new tab)
Risky Bulletin: Hacker hijacks 10% of Tor exit nodes ↗ (opens in a new tab)
Lessons from the Cult of the Dead Cow for today's open source defenders ↗ (opens in a new tab)
Qubes OS Summit 2026: Nitrokey sponsorship; last call for tickets! ↗ (opens in a new tab)
SVD-2026-1009: Third-Party Package Updates in Splunk Enterprise - October 2026 ↗ (opens in a new tab)
8 eMudhra certificates are compromised. Here's what you need to know ↗ (opens in a new tab)
Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native. ↗ (opens in a new tab)