Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Warning: Phishing Attacks Are Abusing RMM Tools to Target Bank Accounts ↗ (opens in a new tab)
Attack Reduction in Huntress Managed ESPM: Disrupting ClickFix ↗ (opens in a new tab)
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers ↗ (opens in a new tab)
ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st) ↗ (opens in a new tab)
SVD-2026-1008: Security Hardening in Splunk Enterprise - October 2026 ↗ (opens in a new tab)
They told me to check my retirement savings balance, but now they’re asking for my password? ↗ (opens in a new tab)
DHS Orders DeepSeek Removed from Federal IT Systems Over Security Risks ↗ (opens in a new tab)
The New Release Metric: Less Cleanup Per Release ↗ (opens in a new tab)
Why Incident Response Demand Will Grow Faster than Expected ↗ (opens in a new tab)
Easily share vault items with a link ↗ (opens in a new tab)
Linux 7.3 released, Bootlin contributions inside ↗ (opens in a new tab)
SaaS access governance: Does access end when employees leave? ↗ (opens in a new tab)
Irish police force has its Twitter hacked in cryptocurrency scam ↗ (opens in a new tab)
OSCP Exam Guide: What to Expect and How to Prepare ↗ (opens in a new tab)
Deno Goes the Way of the Dinosaur ↗ (opens in a new tab)
How an Average of $6 Can Buy Personal Information: Inside Latin America’s “Identity-as-a-Service” Markets ↗ (opens in a new tab)
Continuous accountability for Verified bots ↗ (opens in a new tab)
DORA TLPT Requirements Explained: Where Threat Intelligence Fits ↗ (opens in a new tab)
Risky Bulletin: DataSuckers suspects arrested in Russia ↗ (opens in a new tab)
Insider Threat Report: Dark Web Recruitment & Access Trends ↗ (opens in a new tab)
The Next MOVEit May Already Be in Your File Transfer Queue ↗ (opens in a new tab)
Fixed on Main, Vulnerable in Release: Hunting Backport Gaps at Scale ↗ (opens in a new tab)
Russia Is Tightening Internet Controls, Leading to Operational Risks ↗ (opens in a new tab)
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant ↗ (opens in a new tab)
New Android protections to help keep you safe from mobile scams ↗ (opens in a new tab)
Exclusive: Huskeys adds Profiling to map which parts of web applications a business depends on ↗ (opens in a new tab)
Medicare scam calls, texts and ads: What to watch for this Open Enrollment ↗ (opens in a new tab)
The Blind Spot in Orbit: Why Space Could Be the Next Infrastructure Crisis ↗ (opens in a new tab)
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize ↗ (opens in a new tab)
Have You Heard of Jev? They Have. | UpGuard ↗ (opens in a new tab)