Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• A New Way to Navigate GreyNoise ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-08-17 · First collected 2026-10-24

• Enriched URL Reports: VirusTotal URL Scanning 2.0 ↗ (opens in a new tab)

  VirusTotal Blog · Published 2026-08-11 · First collected 2026-10-24

• CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator ↗ (opens in a new tab)

  Resecurity · Published 2026-08-06 · First collected 2026-10-24

• Pipeleek v1 Release ↗ (opens in a new tab)

  Compass Security Blog · Published 2026-08-04 · First collected 2026-10-24

• EtherHiding: when blockchain technology becomes a cyber weapon ↗ (opens in a new tab)

  Stormshield · Published 2026-08-03 · First collected 2026-10-24

• MQTT and Friends - Introducing BrokerLine ↗ (opens in a new tab)

  ZephrSec - Adventures In Information Security · Published 2026-07-30 · First collected 2026-10-24

• DORA Compliance for Mobile Apps | Appknox ↗ (opens in a new tab)

  Appknox Blog · Published 2026-07-29 · First collected 2026-10-24

• Notes from Underground: Adversarial Prompt Injection ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-07-28 · First collected 2026-10-24

• Intercepting Android WebView traffic under new certificate validity requirement by Chromium ↗ (opens in a new tab)

  NVISO Labs · Published 2026-07-22 · First collected 2026-10-24

• Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-07-22 · First collected 2026-10-24

• Iran War Cyber Threat Landscape | A Midyear Assessment on What Matters ↗ (opens in a new tab)

  SentinelOne Labs · Published 2026-07-21 · First collected 2026-10-24

• The Infostealer Pandemic II : Why Everyone is Target ↗ (opens in a new tab)

  Art Resilia · Published 2026-07-18 · First collected 2026-10-24

• [tl;dr sec] #337 - Harnessing Harnesses, Generate Decoy Environments, Bug Bounty Singularity ↗ (opens in a new tab)

  tl;dr sec · Published 2026-07-16 · First collected 2026-10-24

• How Phishing Simulation Prevents Phishing Attacks ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-07-16 · First collected 2026-10-24

• OpenSSL HollowByte: A DoS Hiding in 11 Bytes ↗ (opens in a new tab)

  Okta Security RSS Feed · Published 2026-07-16 · First collected 2026-10-24

• Community Spotlight: Rishi (@rxerium) ↗ (opens in a new tab)

  ProjectDiscovery Blog · Published 2026-07-13 · First collected 2026-10-24

• Bluetooth Low Energy Security Testing, Consolidated: Introducing Caeruleus ↗ (opens in a new tab)

  Blog - Praetorian · Published 2026-07-10 · First collected 2026-10-24

• Unfit to Boot: Breaking U-Boot's FIT Signature Verification ↗ (opens in a new tab)

  Binarly Research · Published 2026-07-09 · First collected 2026-10-24

• Keyword lists: Stop re-entering the same organizational context across every workflow ↗ (opens in a new tab)

  EclecticIQ Blog · Published 2026-07-08 · First collected 2026-10-24

• Possible Software RAID Issue With Recent mdadm Package ↗ (opens in a new tab)

  Security Onion · Published 2026-07-06 · First collected 2026-10-24

• postMessage targetOrigin bypass via IP normalization ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-07-06 · First collected 2026-10-24

• IoT Threat Assessment with the AttackDefense Framework ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-07-03 · First collected 2026-10-24

• Confidential Computing Summit 2026: Six Signals From the Year the Foundation Got Real ↗ (opens in a new tab)

  Confidential Computing Consortium · Published 2026-07-02 · First collected 2026-10-24

• Cyber Brief 26-07 - June 2026 ↗ (opens in a new tab)

  CERT-EU Threat Intelligence · Published 2026-07-01 · First collected 2026-10-24

• Sandfly 5.8 - Agentless Linux Response and SSH Key Management ↗ (opens in a new tab)

  Sandfly Security Blog RSS Feed · Published 2026-06-28 · First collected 2026-10-24

• Ghost Stories: investigating an undocumented ClickFix C2 in Ghost CMS ↗ (opens in a new tab)

  Sicuranext Blog · Published 2026-06-23 · First collected 2026-10-24

• The dual-use dilemma: Rethinking detection for remote access tool abuse ↗ (opens in a new tab)

  Red Canary · Published 2026-06-17 · First collected 2026-10-24

• A 27-Year-Old Authentication Bypass in OpenBSD's PPP Stack ↗ (opens in a new tab)

  ByteRay Blog · Published 2026-06-16 · First collected 2026-10-24

• Widening Juno Environment: Boosting Threat Detection | Uptycs ↗ (opens in a new tab)

  Uptycs Blog · Published 2026-06-05 · First collected 2026-10-24

• BYOVD and Looting LSASS in the Modern EDR Era ↗ (opens in a new tab)

  G3tSyst3m’s Infosec Blog · Published 2026-05-29 · First collected 2026-10-24