Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Woman faces years in prison over a Cash App account she says she never opened ↗ (opens in a new tab)
Security Serious Unsung Heroes Awards Celebrates 10 Years of Recognising Cybersecurity’s Hidden Heroes ↗ (opens in a new tab)
How to Add Malware Scanning to AWS File Uploads ↗ (opens in a new tab)
TLP Is Not a Suggestion ↗ (opens in a new tab)
Meet Sebastian Gust: What It Takes to Thrive as a Sales Engineer at Zscaler ↗ (opens in a new tab)
Report: Ransomware Attacks Hit a Record High in Q3 2026 ↗ (opens in a new tab)
ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st) ↗ (opens in a new tab)
Introducing ITDR Lookback: Find Out Who Was in Your Microsoft 365 Tenant Before You Were ↗ (opens in a new tab)
Microsoft Warns Windows Server Updates May Disrupt Exchange Email — Here’s the Workaround ↗ (opens in a new tab)
5 signs that standing privileges are putting systems at risk ↗ (opens in a new tab)
Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion ↗ (opens in a new tab)
Krybit ransomware: what you need to know ↗ (opens in a new tab)
September 2026 Threat Trend Report on APT Groups ↗ (opens in a new tab)
Analysis After the Refrigeration System Attack in France: Two Thirds of Exposed Refrigeration Controllers Share an Address with Cameras, Remote Desktop, and VPNs ↗ (opens in a new tab)
Your MSSP Added 10 New Clients. What Breaks First? ↗ (opens in a new tab)
Srsly Risky Biz: Russia's digital detox boomerang ↗ (opens in a new tab)
Front Lines Podcast: What Founders Get Wrong When Pitching CISOs ↗ (opens in a new tab)
What a CBOM Is — and Why an SBOM Won't Answer the Quantum Question ↗ (opens in a new tab)
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations ↗ (opens in a new tab)
Trust What Ships: Your Repository Is Now Your First Defense ↗ (opens in a new tab)
Dead Drop: Inside a Russian Narcotics-as-a-Service Platform | UpGuard ↗ (opens in a new tab)
TAG-193’s Regional Espionage Operations ↗ (opens in a new tab)
Introducing Bitwarden Access Intelligence: Empower your teams with proactive enterprise security protection ↗ (opens in a new tab)
SVD-2026-1006: Advance Notice of Publication of Splunk Security Advisories - October 2026 ↗ (opens in a new tab)
The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk ↗ (opens in a new tab)
The Enterprise Threat Intelligence Report: 2026 ↗ (opens in a new tab)
How to Apply Organizational Context with Orca Custom Agents ↗ (opens in a new tab)
NHS England evolves its cybersecurity strategy with Palo Alto Networks and IBM ↗ (opens in a new tab)
The first disclosure from our Mythos harness ↗ (opens in a new tab)
Quantum computer maker IonQ to buy cybersecurity startup Elisity for $1.3B ↗ (opens in a new tab)