Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• THOR at Locked Shields 2026: How Teams Used It and What They Told Us ↗ (opens in a new tab)

  Nextron Systems · Published 2026-09-30 · First collected 2026-10-24

• Cisco unveils the Relentless Defense report ↗ (opens in a new tab)

  Cisco Newsroom: Security · Published 2026-09-29 · First collected 2026-10-24

• CRA & PSIRT Webinar | Notification Obligations | ONEKEY ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-09-29 · First collected 2026-10-24

• Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl ↗ (opens in a new tab)

  Cyble · Published 2026-09-28 · First collected 2026-10-24

• IndirectAD: Practical Data Poisoning Attacks Against Recommender Systems for Item Promotion ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-28 · First collected 2026-10-24

• MacSync under the microscope: new delivery methods and a new payload ↗ (opens in a new tab)

  Kaspersky Securelist · Published 2026-09-24 · First collected 2026-10-24

• Introducing Ghostwriter Skills ↗ (opens in a new tab)

  SpecterOps · Published 2026-09-22 · First collected 2026-10-24

• WordPress 7.1.2 Release ↗ (opens in a new tab)

  Security – WordPress News · Published 2026-09-22 · First collected 2026-10-24

• How a Managed SOC works: What happens when a cyberattack begins? ↗ (opens in a new tab)

  G DATA Security Blog · Published 2026-09-22 · First collected 2026-10-24

• So I asked my agent instead… ↗ (opens in a new tab)

  Blog RSS Feed | Snyk · Published 2026-09-22 · First collected 2026-10-24

• Enabling Car Play and Android Auto for free on VW and Audi MMI 2026 ↗ (opens in a new tab)

  ZephrSec - Adventures In Information Security · Published 2026-09-18 · First collected 2026-10-24

• Eclypsium Infrastructure Assurance Platform ↗ (opens in a new tab)

  Eclypsium | Supply Chain Security for the Modern Enterprise · Published 2026-09-18 · First collected 2026-10-24

• When the Debugger Lies ↗ (opens in a new tab)

  Daniel Mangum · Published 2026-09-18 · First collected 2026-10-24

• Credentials Are Still the Shortest Path In ↗ (opens in a new tab)

  Blog - Praetorian · Published 2026-09-17 · First collected 2026-10-24

• Weaponizing Starlark: Non-Executable Malware and Scriptable C2 Agents ↗ (opens in a new tab)

  jm33_ng · Published 2026-09-11 · First collected 2026-10-24

• Follow the Money: The Financial Sector's Threat Landscape in 2026 ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-09-10 · First collected 2026-10-24

• Melofee: a look back at a Linux implant and its new variants ↗ (opens in a new tab)

  Stormshield · Published 2026-09-10 · First collected 2026-10-24

• Orkes Conductor Evaluator Remote Code Execution ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - Threat Signal Report · Published 2026-09-10 · First collected 2026-10-24

• HP One Agent: local privilege escalation through race condition [CVE-2026-5064] ↗ (opens in a new tab)

  SCRT Team Blog · Published 2026-09-08 · First collected 2026-10-24

• Shai-Hulud in the Wild: What Security and Incident Response Teams Need to Know ↗ (opens in a new tab)

  Sygnia · Published 2026-09-06 · First collected 2026-10-24

• Financially Motivated Threat Actor BREEZE COMET Targets Brazil ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-09-01 · First collected 2026-10-24

• Understanding the Cyber Resilience Act (CRA): A Practical Overview ↗ (opens in a new tab)

  Art Resilia · Published 2026-09-01 · First collected 2026-10-24

• Mobile App Pentesting Process | 10-Day Security Testing ↗ (opens in a new tab)

  Corellium Blog · Published 2026-08-31 · First collected 2026-10-24

• Name that Ware, August 2026 ↗ (opens in a new tab)

  bunnie's blog · Published 2026-08-30 · First collected 2026-10-24

• Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-08-28 · First collected 2026-10-24

• Carry-On Compromise: TA4922 Packs PackClient ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-08-27 · First collected 2026-10-24

• Healthcare Cybersecurity: Breach Costs to Average over $12M by 2026, ScienceSoft Predicts ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-08-25 · First collected 2026-10-24

• A Note on Pentesting Passkeys ↗ (opens in a new tab)

  Compass Security Blog · Published 2026-08-25 · First collected 2026-10-24

• Annual vs Continuous Mobile App Security Testing | Appknox ↗ (opens in a new tab)

  Appknox Blog · Published 2026-08-20 · First collected 2026-10-24

• Solving an ORB mystery ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-08-09 · First collected 2026-10-24