Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Inside OWAReaper: How CVE-2026-42897 Enables Persistent Exchange Mailbox Compromise ↗ (opens in a new tab)

  Resecurity · Published 2026-08-02 · First collected 2026-10-24

• The Simple Elegance of the Integrated Timing Belt Loopback Fastener ↗ (opens in a new tab)

  Daniel Mangum · Published 2026-07-31 · First collected 2026-10-24

• VMware vDefend Sessions at VMware Explore 2026 ↗ (opens in a new tab)

  VMware Security Blog · Published 2026-07-23 · First collected 2026-10-24

• The Hidden Privilege of Automation Platforms ↗ (opens in a new tab)

  Compass Security Blog · Published 2026-07-21 · First collected 2026-10-24

• Volume Is Not Risk: Making Sense of the 'Vulnpocalypse' ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-07-21 · First collected 2026-10-24

• wp2shell - Code Trace Deep Dive ↗ (opens in a new tab)

  ZephrSec - Adventures In Information Security · Published 2026-07-18 · First collected 2026-10-24

• The Infostealer Pandemic: Why Every Organisation Is Vulnerable ↗ (opens in a new tab)

  Art Resilia · Published 2026-07-11 · First collected 2026-10-24

• Sign here… and install an unwanted RMM ↗ (opens in a new tab)

  Stormshield · Published 2026-07-10 · First collected 2026-10-24

• Different Types of Penetration Testing and Why You Need Them ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-07-10 · First collected 2026-10-24

• Reducing Microsoft Sentinel Costs Without Compromising Detection – Part 2: The Firewall Quest ↗ (opens in a new tab)

  NVISO Labs · Published 2026-07-07 · First collected 2026-10-24

• [tl;dr sec] #335 - Prompt Injection as Role Confusion, PHP Ecosystem Security, New MCP Spec ↗ (opens in a new tab)

  tl;dr sec · Published 2026-07-02 · First collected 2026-10-24

• Knossos: Procedurally Generated Decoy Environments ↗ (opens in a new tab)

  Blog - Praetorian · Published 2026-07-02 · First collected 2026-10-24

• Context Engineering | Compaction & Agent Memory for Automated Malware Analysis ↗ (opens in a new tab)

  SentinelOne Labs · Published 2026-07-02 · First collected 2026-10-24

• The Zen of Bluetooth Security ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-06-30 · First collected 2026-10-24

• Welcome to the June 2026 Newsletter ↗ (opens in a new tab)

  Confidential Computing Consortium · Published 2026-06-29 · First collected 2026-10-24

• Best Zimperium Alternatives for Mobile App Security in 2026 | Appknox ↗ (opens in a new tab)

  Appknox Blog · Published 2026-06-24 · First collected 2026-10-24

• Linux Scales eBPF Rootkit Detection and Analysis ↗ (opens in a new tab)

  Sandfly Security Blog RSS Feed · Published 2026-06-23 · First collected 2026-10-24

• Why doctrine is becoming a technology requirement for modern defense intelligence ↗ (opens in a new tab)

  EclecticIQ Blog · Published 2026-06-22 · First collected 2026-10-24

• Continuous PR Security Review ↗ (opens in a new tab)

  ProjectDiscovery Blog · Published 2026-06-15 · First collected 2026-10-24

• One Paste to Rule Them All: Inside a ClickFix → EtherHiding → GULoader Intrusion ↗ (opens in a new tab)

  Sicuranext Blog · Published 2026-06-15 · First collected 2026-10-24

• How threat hunting evolves at scale ↗ (opens in a new tab)

  Red Canary · Published 2026-06-11 · First collected 2026-10-24

• Trusted Until It Isn't: The Zabbix SQL Injection That "Needs an Admin" ↗ (opens in a new tab)

  ByteRay Blog · Published 2026-06-08 · First collected 2026-10-24

• Cyber Brief 26-06 - May 2026 ↗ (opens in a new tab)

  CERT-EU Threat Intelligence · Published 2026-06-02 · First collected 2026-10-24

• WAF Bypasses via h2 framing ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-06-01 · First collected 2026-10-24

• Security Onion 3.1.0 Hotfix 20260528 Now Available! ↗ (opens in a new tab)

  Security Onion · Published 2026-05-28 · First collected 2026-10-24

• Microsoft’s MSHTA Legacy Tool Still Powers Malware Campaigns on Windows ↗ (opens in a new tab)

  Bitdefender Labs · Published 2026-05-19 · First collected 2026-10-24

• Linux Investigation (Part 2) ↗ (opens in a new tab)

  Righteous IT · Published 2026-05-05 · First collected 2026-10-24

• Building an Encrypted C2 Implant Using QUIC ↗ (opens in a new tab)

  G3tSyst3m’s Infosec Blog · Published 2026-04-30 · First collected 2026-10-24

• CVE-2026-34118: TP-Link HTTP POST body heap buffer overflow ↗ (opens in a new tab)

  Taszk Labs on taszk.io labs · Published 2026-04-28 · First collected 2026-10-24

• VirusTotal Inside the Agent Loop ↗ (opens in a new tab)

  VirusTotal Blog · Published 2026-04-16 · First collected 2026-10-24