Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Osquery In-House vs Building: What It Takes at Scale ↗ (opens in a new tab)
Building A Custom Obsidian Publishing Pipeline ↗ (opens in a new tab)
Building a Firewall ...via Endpoint Security!? ↗ (opens in a new tab)
Insomni’Hack 2026 – Golden Payout writeup ↗ (opens in a new tab)
[QuickPost] DuckDB NDJSON force all columns ↗ (opens in a new tab)
Datadog and Okta Combine for New Customer Detections ↗ (opens in a new tab)
Security teams are not a lottery ticket ↗ (opens in a new tab)
macOS JIT Memory ↗ (opens in a new tab)
ETH medal for Johannes Wikner ↗ (opens in a new tab)
CVE-2025-65397: Insecure Startup Script Allows Root Command Execution in Blurams Flare Camera ↗ (opens in a new tab)
Happy 23rd Birthday TaoSecurity Blog ↗ (opens in a new tab)
Lessons Learned from 20 Years & Why You Should Blog ↗ (opens in a new tab)
More IPv4 address parsing ↗ (opens in a new tab)
Chatting with Chippies: Modifying TP-Link AX 1800 Firmware ↗ (opens in a new tab)
Instagram Scams: Parental Guide on Keeping Teens Safe on Instagram ↗ (opens in a new tab)
How an Old Bug in Lighttpd Gained New Life in AMI BMC, Including Lenovo and Intel products ↗ (opens in a new tab)
Script Confusion: Playing with AppleScripts hidden in Named Forks ↗ (opens in a new tab)
Security vs. Compliance: What's the Difference? ↗ (opens in a new tab)
Ziewin.com EXPOSED – Fake or Real? Casino Investigation ↗ (opens in a new tab)
Tight Post-Quantum Multi-Key Security of the FX Construction ↗ (opens in a new tab)
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year ↗ (opens in a new tab)
Where to Find Sysmon Logs on Windows and How to Export Them ↗ (opens in a new tab)
Woman faces years in prison over a Cash App account she says she never opened ↗ (opens in a new tab)
How to Add Malware Scanning to AWS File Uploads ↗ (opens in a new tab)
Cyber incident forces Richmond Public Schools in Virginia to shut internet access ↗ (opens in a new tab)
Salt Security wins three InfoSec Innovator awards ↗ (opens in a new tab)
HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait ↗ (opens in a new tab)
Free Helpline for Victims of Online Crime Pilots in South Africa ↗ (opens in a new tab)
Identity Posture Assessment for Microsoft 365 | Managed ISPM ↗ (opens in a new tab)
ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th) ↗ (opens in a new tab)