Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• GuardDuty Extended Threat Detection has added five new indicators to surface attack sequences ↗ (opens in a new tab)

  AWS Security Blog · Published 2026-10-12 · First collected 2026-10-24

• What to do when a data breach notice doesn't say much ↗ (opens in a new tab)

  WeLiveSecurity · Published 2026-10-12 · First collected 2026-10-24

• WordPress - Post Author Second Order SQLi ↗ (opens in a new tab)

  Tenable Research Advisories · Published 2026-10-09 · First collected 2026-10-24

• OpenAI GPT-6.1 Sol: An evaluation ↗ (opens in a new tab)

  Sonar Blog · Published 2026-10-09 · First collected 2026-10-24

• XSAs released on 2026-10-09 ↗ (opens in a new tab)

  Qubes OS · Published 2026-10-09 · First collected 2026-10-24

• New on the Map — September 2026: 22 Protocol and Endpoint Scanners ↗ (opens in a new tab)

  Censys · Published 2026-10-08 · First collected 2026-10-24

• 🎙️SECURITY.COM The Podcast: The Resilient Channel ↗ (opens in a new tab)

  Broadcom – Symantec Blogs · Published 2026-10-08 · First collected 2026-10-24

• Is Your DDoS Protection Actually On? ↗ (opens in a new tab)

  Imperva Blog · Published 2026-10-08 · First collected 2026-10-24

• Incident affecting ASOS customers ↗ (opens in a new tab)

  UK NCSC blogs · Published 2026-10-06 · First collected 2026-10-24

• Chrome's Response to Recent ccTLD Registry Hijacks ↗ (opens in a new tab)

  Google Security · Published 2026-10-06 · First collected 2026-10-24

• From Detonation to Detection: The Sandbox Now Writes the Rules ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-10-06 · First collected 2026-10-24

• Logging is a Discipline, Not a Switch ↗ (opens in a new tab)

  TrustedSec · Published 2026-10-06 · First collected 2026-10-24

• OpenSSF Shares Expanded Membership and New Global Policy Resources During Community Day Europe ↗ (opens in a new tab)

  Open Source Security Foundation · Published 2026-10-06 · First collected 2026-10-24

• What’s New in Wiz Service Catalog: Smarter Discovery, Governance, and Service-Level Context ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-10-05 · First collected 2026-10-24

• Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-10-05 · First collected 2026-10-24

• 2026-09-29: Macfinger ClickFix activity ↗ (opens in a new tab)

  Malware-Traffic-Analysis.net (Blog Entries) · Published 2026-10-03 · First collected 2026-10-24

• Follow the thread: a new dashboard to investigate account abuse ↗ (opens in a new tab)

  Cloudflare – Security Tag · Published 2026-10-02 · First collected 2026-10-24

• Vulnérabilités de produits du secteur santé : Retour d'expérience du CERT Santé et du CERT-FR (02 octobre 2026) ↗ (opens in a new tab)

  CERT-FR threat intelligence · Published 2026-10-02 · First collected 2026-10-24

• Someone Clicked the Link. Is Your Security Team Ready? ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-10-01 · First collected 2026-10-24

• Preparing governments for an era of interconnected cyber risk ↗ (opens in a new tab)

  Microsoft Security Blog · Published 2026-10-01 · First collected 2026-10-24

• Heimdal partners with Elovade to bring unified cybersecurity platform to the DACH region ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-10-01 · First collected 2026-10-24

• Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739) ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-09-30 · First collected 2026-10-24

• Weekly All-Source Espionage Intelligence Brief 9.29.26 ↗ (opens in a new tab)

  Krypt3ia · Published 2026-09-29 · First collected 2026-10-24

• Cofense Vision Extends Post-Perimeter Phishing Defense to Google Workspace ↗ (opens in a new tab)

  Cofense Intelligence · Published 2026-09-29 · First collected 2026-10-24

• Management Center 4.2: Enterprise SSO and Stronger Account Security ↗ (opens in a new tab)

  Nextron Systems · Published 2026-09-28 · First collected 2026-10-24

• Stealthy Physical Adversarial Attacks on Speaker Recognition via Near-Ultrasonic Perturbations ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-28 · First collected 2026-10-24

• Master Key Included: Detecting SolarWinds ARM CVE-2026-28326 ↗ (opens in a new tab)

  Bishopfox · Published 2026-09-25 · First collected 2026-10-24

• Fewer Findings, Faster Answers: How ActiveState and Trivy Turn a Scan Into a Verdict ↗ (opens in a new tab)

  Aqua · Published 2026-09-24 · First collected 2026-10-24

• File Acquisition May Be Recorded as “FileAccessed” in Microsoft 365 (“M365”) ↗ (opens in a new tab)

  LevelBlue (SpiderLabs Blog) · Published 2026-09-24 · First collected 2026-10-24

• Weekly Threat Bulletin – September 23rd, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-09-23 · First collected 2026-10-24