Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
ExfilSquad Targets New Victims, Shares Data via Torrents ↗ (opens in a new tab)
Security Onion Documentation Printed Book Now Updated for Security Onion 3.2! ↗ (opens in a new tab)
EclecticIQ Intelligence Center 3.8: Built for the way security teams are actually working now ↗ (opens in a new tab)
Hidden beneFITs: Bypassing Signature Verification in U-Boot SPL ↗ (opens in a new tab)
Xpsd: Knowing Which CVEs Actually Reach Your Code ↗ (opens in a new tab)
Cyber Brief 26-08 - July 2026 ↗ (opens in a new tab)
HTTP2Crash: A Denial of Service (DoS) in HTTP/2 Flow Control ↗ (opens in a new tab)
$91,000 in Grants: How New University Research is Pushing the Boundaries of Confidential Computing ↗ (opens in a new tab)
[tl;dr sec] #338 - OpenAI and Hugging Face, Accelerating EDR Evasion, Google's Mantis ↗ (opens in a new tab)
13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan ↗ (opens in a new tab)
Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis? ↗ (opens in a new tab)
Introducing Internal Network Scanning: see your network the way an attacker inside it would ↗ (opens in a new tab)
Using WebDav to Outsmart Smartscreen, MOTW, and that OTHER Alert ↗ (opens in a new tab)
Preserving Pixter ↗ (opens in a new tab)
Deprecation of Linux Kernels Prior to 3.2 in Sandfly 5.8 ↗ (opens in a new tab)
Why the HTTP QUERY Method Is a Good Idea but Accept-Query Is Not ↗ (opens in a new tab)
What Mythos Revealed About Modern Cybersecurity | Uptycs ↗ (opens in a new tab)
The Zen of Bluetooth Security ↗ (opens in a new tab)
Improving Transparency and Assurance in the Web PKI: Mozilla Root Store Policy v3.1 ↗ (opens in a new tab)
The Late Show ↗ (opens in a new tab)
Intelligence Insights: June 2026 ↗ (opens in a new tab)
Bill to Create Independent US Cyber Force Wants to Place It Under the US Army ↗ (opens in a new tab)
Inside APAC's malvertising ecosystem: How scams spread through social media ads ↗ (opens in a new tab)
Yes we can secure C: an example ↗ (opens in a new tab)
Your session cookies are probably misconfigured: How to fix cookie security flags ↗ (opens in a new tab)
Distinguished paper award for Phoenix! ↗ (opens in a new tab)
The Accidental C2 - Exploring Dev Tunnels for Remote Access ↗ (opens in a new tab)
Linux Investigation (Part 4) ↗ (opens in a new tab)
CVE-2025-8065: TP-Link ONVIF stack buffer overflow ↗ (opens in a new tab)
I’m Sorry Dave, This Request Triggered Restrictions On Violative Cyber Content ↗ (opens in a new tab)