Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Football Fever Fuels Scam Campaigns Across Email and Social Media ↗ (opens in a new tab)
REST API security testing: A complete guide ↗ (opens in a new tab)
Linux Investigation (Part 3) ↗ (opens in a new tab)
Honorable Mention for Johannes Wikner ↗ (opens in a new tab)
CVE-2026-0651: TP-Link HTTP GET path traversal ↗ (opens in a new tab)
Proxies all the way down. ↗ (opens in a new tab)
From a Regular Red Team Exercise to Developing a Custom C2 Channel over MS Teams ↗ (opens in a new tab)
Playing with the LANL ARCS Data Sets ↗ (opens in a new tab)
Building A Hacker Van ↗ (opens in a new tab)
No Paste for You! ↗ (opens in a new tab)
Introducing Cobalt Strike Research Labs ↗ (opens in a new tab)
Mandiant Global Median Dwell Time Deteriorates from 11 to 14 Days ↗ (opens in a new tab)
Pi is exactly 3.141592653589793 ↗ (opens in a new tab)
CVE-2025-65396: SPI Fault Enables Bootloader Access and Firmware Dump in Blurams Flare Camera ↗ (opens in a new tab)
Dynamic Social Media Images for Hugo ↗ (opens in a new tab)
Just-in-Time for Runtime Interpretation – Unmasking the World of LLVM IR Based JIT Execution ↗ (opens in a new tab)
Kernel of Doom - A Tiny Linux Kernel to Boot into Doom ↗ (opens in a new tab)
Decompiling run-only AppleScripts ↗ (opens in a new tab)
rePalm ↗ (opens in a new tab)
Polymorphic Viruses: Why They’re Harder to Detect Every Year ↗ (opens in a new tab)
Sha1-Hulud: The Second Coming – GitHub Patterns Exposes a Deeper NPM Attack ↗ (opens in a new tab)
The UK’s Four-Step Framework for Supply Chain Resilience ↗ (opens in a new tab)
Immutable Strings in Java – Are Your Secrets Still Safe? ↗ (opens in a new tab)
OneDrive updates ↗ (opens in a new tab)
Exclusivemanlux.online EXPOSED – Fake Store or Real? Read First ↗ (opens in a new tab)
Faster and Smaller Anonymous Credentials from Standardized Signatures ↗ (opens in a new tab)
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown ↗ (opens in a new tab)
Why Crypto Needs an Undo Button Before It Can Go Mainstream ↗ (opens in a new tab)
Ransomware attack forces Oneonta City School District in New York to cancel classes ↗ (opens in a new tab)
Where to Find Linux auditd Logs and How to Export Them ↗ (opens in a new tab)