Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• 1Password recognized in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management ↗ (opens in a new tab)

  Blog on 1Password Blog · Published 2026-10-23 · First collected 2026-10-24

• Okta and Auth0 are removing trust in the eMudhra emSign ECC Root CA – G3 ↗ (opens in a new tab)

  Okta Security RSS Feed · Published 2026-10-23 · First collected 2026-10-24

• Is “SIEM-less” really what it sounds like? ↗ (opens in a new tab)

  Sophos Blogs · Published 2026-10-23 · First collected 2026-10-24

• 2026-10-22: Seven days of scans and probes and web traffic hitting my web server ↗ (opens in a new tab)

  Malware-Traffic-Analysis.net (Blog Entries) · Published 2026-10-22 · First collected 2026-10-24

• Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys ↗ (opens in a new tab)

  Black Hills Information Security, Inc. · Published 2026-10-22 · First collected 2026-10-24

• WorkNest Secure Gains The Cyber Scheme Accreditation ↗ (opens in a new tab)

  IT Security Guru · Published 2026-10-22 · First collected 2026-10-24

• I had plans for that second ↗ (opens in a new tab)

  Cisco Talos Blog · Published 2026-10-22 · First collected 2026-10-24

• How bug bounty sharpens one researcher’s security skills ↗ (opens in a new tab)

  The GitHub Blog: Security News and Updates · Published 2026-10-22 · First collected 2026-10-24

• EMudhra Intermediate CA Certificates Compromised ↗ (opens in a new tab)

  Unit 42 · Published 2026-10-22 · First collected 2026-10-24

• PHP2Shell: Early Attack Activity Through Imperva’s Lens ↗ (opens in a new tab)

  Imperva Blog · Published 2026-10-22 · First collected 2026-10-24

• PHP2Shell Exposure: 73% of 2.2 Million Version-Disclosing PHP Services Run Unsupported Branches ↗ (opens in a new tab)

  Blog Archives - Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime · Published 2026-10-22 · First collected 2026-10-24

• Unified Defense from Endpoint to Cloud: Real-Time Protection with Cisco Security, Splunk, and SentinelOne ↗ (opens in a new tab)

  Cisco Security Blog · Published 2026-10-22 · First collected 2026-10-24

• Unboxing Phishing Kits: Huntress Examines 3 Real Kits ↗ (opens in a new tab)

  Huntress Blog · Published 2026-10-22 · First collected 2026-10-24

• Neutralizing PHP2Shell: Stopping Critical PHP RCEs with VMware vDefend and Avi WAF ↗ (opens in a new tab)

  VMware Security Blog · Published 2026-10-22 · First collected 2026-10-24

• Building a Hunt Team the SOC Can Rely On ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-10-22 · First collected 2026-10-24

• PHP2SHELL Detection Coverage in THOR ↗ (opens in a new tab)

  Nextron Systems · Published 2026-10-22 · First collected 2026-10-24

• ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-10-22 · First collected 2026-10-24

• Localizing compliance at scale: achieving South Korea’s ISMS certification ↗ (opens in a new tab)

  Cloudflare – Security Tag · Published 2026-10-22 · First collected 2026-10-24

• SonarQube container scanning is now in open beta ↗ (opens in a new tab)

  Sonar Blog · Published 2026-10-22 · First collected 2026-10-24

• Cyber Threat Context for Early Response: Enriching SOC Telemetry with Real-Time Intel from 16K Organizations ↗ (opens in a new tab)

  ANY.RUN Cybersecurity Blog · Published 2026-10-22 · First collected 2026-10-24

• How to choose the right CTI tools for your business ↗ (opens in a new tab)

  Security Archives - TechRepublic · Published 2026-10-22 · First collected 2026-10-24

• MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration ↗ (opens in a new tab)

  WeLiveSecurity · Published 2026-10-22 · First collected 2026-10-24

• Inside SiriusQT: A Seriously Skilled RAT ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-10-22 · First collected 2026-10-24

• Trimarc, 18 Months Later at TrustedSec ↗ (opens in a new tab)

  TrustedSec · Published 2026-10-22 · First collected 2026-10-24

• Behind Japan’s Warnings of a Cyber Crisis ↗ (opens in a new tab)

  Recorded Future – Main Feed · Published 2026-10-22 · First collected 2026-10-24

• EN 40000: What Manufacturers Must Prove Under the CRA ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-10-22 · First collected 2026-10-24

• PHP2Shell (CVE-2026-109618 and CVE-2026-109619): Detecting unauthenticated remote code execution in PHP core ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-10-22 · First collected 2026-10-24

• Three tips for staying safe on Cyber Monday ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-10-22 · First collected 2026-10-24

• State of Post-Quantum Cryptography implementations ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-10-21 · First collected 2026-10-24

• Weekly Threat Bulletin – October 21st, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-10-21 · First collected 2026-10-24