Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• HTTP/3 in Burp Suite - it’s time to find a bigger wordlist ↗ (opens in a new tab)

  PortSwigger Research · Published 2026-09-23 · First collected 2026-10-24

• CVE-2024-38508, an N-day story - runZero Research ↗ (opens in a new tab)

  runZero Blog · Published 2026-09-23 · First collected 2026-10-24

• Meet ONEKEY at IoT Tech Expo Europe in Amsterdam ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-09-23 · First collected 2026-10-24

• UN Reports Citing Citizen Lab Submissions Published ↗ (opens in a new tab)

  The Citizen Lab · Published 2026-09-22 · First collected 2026-10-24

• Risky identities continue to plague cloud infrastructures ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-09-22 · First collected 2026-10-24

• 21st September – Threat Intelligence Report ↗ (opens in a new tab)

  Check Point Research · Published 2026-09-21 · First collected 2026-10-24

• Device tree addons: describing non-discoverable addon boards and connectors ↗ (opens in a new tab)

  Bootlin · Published 2026-09-18 · First collected 2026-10-24

• The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents ↗ (opens in a new tab)

  Kaspersky Securelist · Published 2026-09-17 · First collected 2026-10-24

• Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026 ↗ (opens in a new tab)

  Cyble · Published 2026-09-17 · First collected 2026-10-24

• I want a better watch ↗ (opens in a new tab)

  Javvad Malik · Published 2026-09-16 · First collected 2026-10-24

• Threat Hunting on the Endpoint: Hunting Adversaries Where They Live ↗ (opens in a new tab)

  Black Hills Information Security, Inc. · Published 2026-09-16 · First collected 2026-10-24

• Ghostwriter v7.3.0: A Fresh New Look ↗ (opens in a new tab)

  SpecterOps · Published 2026-09-16 · First collected 2026-10-24

• ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell ↗ (opens in a new tab)

  From the Frog's mouth - JFrog Blog · Published 2026-09-15 · First collected 2026-10-24

• Hack of the Berlin Senate Administration Will Have Consequences for Decades ↗ (opens in a new tab)

  G DATA Security Blog · Published 2026-09-09 · First collected 2026-10-24

• A human approach to making cybersecurity stronger ↗ (opens in a new tab)

  BH Consulting · Published 2026-09-08 · First collected 2026-10-24

• WordPress Security Plugins: How to Choose the Right One ↗ (opens in a new tab)

  Sucuri Blog · Published 2026-09-05 · First collected 2026-10-24

• Proactive cyber defense for governments and enterprises ↗ (opens in a new tab)

  Safety & Security · Published 2026-09-02 · First collected 2026-10-24

• Secure What Agents Do, Not Just What They Say ↗ (opens in a new tab)

  Salt Security Blog · Published 2026-08-31 · First collected 2026-10-24

• Kernel Debugging | Inspect and Modify Under User Control ↗ (opens in a new tab)

  Corellium Blog · Published 2026-08-31 · First collected 2026-10-24

• Name that Ware, August 2026 ↗ (opens in a new tab)

  bunnie's blog · Published 2026-08-30 · First collected 2026-10-24

• Siemens S7 Series PLCs and other Internet-exposed PLC Attack ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - Threat Signal Report · Published 2026-08-29 · First collected 2026-10-24

• Cisco Launches Sovereign Critical Infrastructure in Canada – Government and Organizations Gain More Choice and Control ↗ (opens in a new tab)

  Cisco Newsroom: Security · Published 2026-08-25 · First collected 2026-10-24

• Some Notes on Call Stack Spoofing ↗ (opens in a new tab)

  jm33_ng · Published 2026-08-20 · First collected 2026-10-24

• A New Era of Bulletproof Hosting Providers Emerge ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-08-19 · First collected 2026-10-24

• Remediation Agents, Demystified: Why Fixing Beats Finding ↗ (opens in a new tab)

  Blog RSS Feed | Snyk · Published 2026-08-19 · First collected 2026-10-24

• The EU CRA Clock is Ticking:Are You Compliant? ↗ (opens in a new tab)

  Eclypsium | Supply Chain Security for the Modern Enterprise · Published 2026-08-17 · First collected 2026-10-24

• GreyNoise Welcomes New SVP of Adversary Operations ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-08-13 · First collected 2026-10-24

• WordPress 7.0.4 Release ↗ (opens in a new tab)

  Security – WordPress News · Published 2026-08-12 · First collected 2026-10-24

• How we took malware advisories beyond npm ↗ (opens in a new tab)

  The GitHub Blog: Security News and Updates · Published 2026-08-06 · First collected 2026-10-24

• UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-08-06 · First collected 2026-10-24