Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Zscaler CXO Monthly Roundup | September 2026 ↗ (opens in a new tab)
A path to user verification in 1Password ↗ (opens in a new tab)
ConnectWise Cloud Backup application abused in cross-tenant token sweep ↗ (opens in a new tab)
German Police Seize Robot After Alleged Groping of 16-Year-Old Girl ↗ (opens in a new tab)
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference ↗ (opens in a new tab)
Risky Bulletin: Spyware chip found in Ledger crypto-wallets ↗ (opens in a new tab)
Ransom & Dark Web Issues Week 3, October 2026 ↗ (opens in a new tab)
What’s Really Attacking Your Industry? Insights From 74K Sandbox Analyses ↗ (opens in a new tab)
September 2026 CVE Landscape ↗ (opens in a new tab)
Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM ↗ (opens in a new tab)
What to expect from theCUBE’s Smarsh EDGE analysis: Tune in Oct. 22 ↗ (opens in a new tab)
WordPress - Post Author Authenticated SQLi ↗ (opens in a new tab)
Hijacked TensorLake npm Turned Install Into Credential Risk ↗ (opens in a new tab)
Making sure the checks get printed ↗ (opens in a new tab)
CastleStealer: An Emerging Infostealer Growing More Sophisticated ↗ (opens in a new tab)
What RL Found Before Anthropic’s Midnight Blizzard Report ↗ (opens in a new tab)
Healthcare Is Cybercrime’s Highest-Value Target: Ransomware, Exposure, and the Expanding Attack Surface ↗ (opens in a new tab)
MATCHBOIL: New tricks, same old evil intentions ↗ (opens in a new tab)
Fill assist: improving autofill every time for everyone ↗ (opens in a new tab)
Introducing the Chainguard Console Insights Dashboard, powered by Guardener ↗ (opens in a new tab)
Evolution of Web3 in Cloud Supply Chain Attacks ↗ (opens in a new tab)
DarkSword/Coruna Open Directory Finding Report ↗ (opens in a new tab)
SVD-2026-1005: Third-Party Package Updates in Splunk Add-on for Amazon Web Services - September 2026 ↗ (opens in a new tab)
Sonar Vortex is now available on SonarQube Server ↗ (opens in a new tab)
DLP Inspection Where Your Agents Run: Extending Symantec DLP to Tetrate Agent Router ↗ (opens in a new tab)
The Hidden DoS Vector in SQL Parsers ↗ (opens in a new tab)
Protected Quick Tunnels: simple accountless authentication for your next dev project ↗ (opens in a new tab)
Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino ↗ (opens in a new tab)
Qubes OS 4.3.2 has been released! ↗ (opens in a new tab)
6 ways Advanced Protection on Android keeps you safe ↗ (opens in a new tab)