Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Chainguard Libraries expands to Go and .NET ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-10-14 · First collected 2026-10-24

• Part 2 – Cybersecurity journeys: What even is this job? ↗ (opens in a new tab)

  AWS Security Blog · Published 2026-10-13 · First collected 2026-10-24

• SonarQube Cloud now supports bulk import for Azure DevOps and Bitbucket ↗ (opens in a new tab)

  Sonar Blog · Published 2026-10-13 · First collected 2026-10-24

• Make Every Symantec DLP High Speed Discovery Scan Count ↗ (opens in a new tab)

  Broadcom – Symantec Blogs · Published 2026-10-13 · First collected 2026-10-24

• TrustedSec Joins the OpenAI Daybreak Defense Network ↗ (opens in a new tab)

  TrustedSec · Published 2026-10-13 · First collected 2026-10-24

• XSAs released on 2026-10-13 ↗ (opens in a new tab)

  Qubes OS · Published 2026-10-13 · First collected 2026-10-24

• MyReport Updater: From gRPC to SYSTEM ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-10-12 · First collected 2026-10-24

• The Ultimate Guide to Brand Protection with Censys ↗ (opens in a new tab)

  Censys · Published 2026-10-09 · First collected 2026-10-24

• Hermes Agent - Pre-Authentication Memory Exhaustion ↗ (opens in a new tab)

  Tenable Research Advisories · Published 2026-10-09 · First collected 2026-10-24

• CVE-2026-21589: Critical Pre-Authentication File Read Affects Atlassian Data Center Products ↗ (opens in a new tab)

  Imperva Blog · Published 2026-10-08 · First collected 2026-10-24

• Post-quantum authentication: Why organizations should start testing certificate ecosystems now ↗ (opens in a new tab)

  Microsoft Security Blog · Published 2026-10-08 · First collected 2026-10-24

• Chasing AMMYY at Splunk .conf ↗ (opens in a new tab)

  Cisco Security Blog · Published 2026-10-08 · First collected 2026-10-24

• China-linked malicious actors called out by UK and international partners for targeting sensitive data globally ↗ (opens in a new tab)

  UK NCSC blogs · Published 2026-10-08 · First collected 2026-10-24

• Solving the Continuous Authorization Conundrum ↗ (opens in a new tab)

  CrowdStrike Blog · Published 2026-10-08 · First collected 2026-10-24

• How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed) ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-10-07 · First collected 2026-10-24

• From Guest Complaints to Malware: Blockchain Abuse Targets Hotels ↗ (opens in a new tab)

  Cofense Intelligence · Published 2026-10-07 · First collected 2026-10-24

• Toronto-Based VPN Provider Plans to Quit Canada Over Lawful-Access Bill ↗ (opens in a new tab)

  The Citizen Lab · Published 2026-10-06 · First collected 2026-10-24

• What’s in the SOSS? Podcast #75 – S3E27 From Upstream to Downstream: Managing Open Source Risk in a Changing Regulatory Era with Vincent Danen ↗ (opens in a new tab)

  Open Source Security Foundation · Published 2026-10-06 · First collected 2026-10-24

• Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-10-06 · First collected 2026-10-24

• Smashing the token limit with overlapping fragments ↗ (opens in a new tab)

  PortSwigger Research · Published 2026-10-05 · First collected 2026-10-24

• Bulletin d'actualité CERTFR-2026-ACT-042 (05 octobre 2026) ↗ (opens in a new tab)

  CERT-FR news · Published 2026-10-05 · First collected 2026-10-24

• 2026-09-30: SmartApeSG ClickFix pushes CNCmachineRMS RAT ↗ (opens in a new tab)

  Malware-Traffic-Analysis.net (Blog Entries) · Published 2026-10-04 · First collected 2026-10-24

• TIKTOUK: Tracing a WordPress Credential Collection Toolkit ↗ (opens in a new tab)

  LevelBlue (SpiderLabs Blog) · Published 2026-10-01 · First collected 2026-10-24

• Innovation wins. Why smaller beats bigger ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-10-01 · First collected 2026-10-24

• SC WordPress Malware: A Self-Healing Mesh of Loaders, Drop-Ins, and a Blockchain-Controlled Backdoor ↗ (opens in a new tab)

  Sucuri Blog · Published 2026-10-01 · First collected 2026-10-24

• Weekly Threat Bulletin – September 30th, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-09-30 · First collected 2026-10-24

• Supply Chain Security Has the Operating Model Backwards ↗ (opens in a new tab)

  Aqua · Published 2026-09-30 · First collected 2026-10-24

• What is the EU Cyber Resilience Act? Your Essential Guide ↗ (opens in a new tab)

  Outpost24 · Published 2026-09-30 · First collected 2026-10-24

• Weekly Cyber Espionage Intelligence Brief 9.29.26 ↗ (opens in a new tab)

  Krypt3ia · Published 2026-09-29 · First collected 2026-10-24

• Security Roundup September 2026 ↗ (opens in a new tab)

  BH Consulting · Published 2026-09-29 · First collected 2026-10-24