Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Citizen Lab Director Slams Trump Administration, ‘Techno-Fascist’ Executives ↗ (opens in a new tab)

  The Citizen Lab · Published 2026-10-21 · First collected 2026-10-24

• Best practices for integrating IAM Roles Anywhere with your PKI ↗ (opens in a new tab)

  AWS Security Blog · Published 2026-10-21 · First collected 2026-10-24

• Chrome Now Warns Before Insecure HTTP Connections ↗ (opens in a new tab)

  Google Security · Published 2026-10-21 · First collected 2026-10-24

• A safety net for eBPF: adding KASAN support to JITed programs ↗ (opens in a new tab)

  Bootlin · Published 2026-10-21 · First collected 2026-10-24

• Millions of PHP Instances Exposed - What Organizations Need To Do Right Now ↗ (opens in a new tab)

  Palo Alto Networks Blog · Published 2026-10-21 · First collected 2026-10-24

• “Approximately 110,000 PHP Servers” in Korea: How Were They Counted? ↗ (opens in a new tab)

  ASEC · Published 2026-10-21 · First collected 2026-10-24

• Graphalgo campaign moves upstream into infrastructure as code ↗ (opens in a new tab)

  ReversingLabs Blog · Published 2026-10-21 · First collected 2026-10-24

• eMudhra CA Key Compromise: Weak Keys, Risks and Fixes ↗ (opens in a new tab)

  SOCRadar® Cyber Intelligence Inc. · Published 2026-10-21 · First collected 2026-10-24

• Critical PHP Security Release ↗ (opens in a new tab)

  Security – WordPress News · Published 2026-10-21 · First collected 2026-10-24

• Chi - Client IP spoofing in ClientIPFromXFF via X-Forwarded-For ↗ (opens in a new tab)

  Tenable Research Advisories · Published 2026-10-21 · First collected 2026-10-24

• Sizing the PHP exposure window for CVE-2026-109618 and CVE-2026-109619 with VirusTotal ↗ (opens in a new tab)

  VirusTotal Blog · Published 2026-10-21 · First collected 2026-10-24

• In HyperArmor, Three Pillars Uphold A Layered Defense ↗ (opens in a new tab)

  Broadcom – Symantec Blogs · Published 2026-10-21 · First collected 2026-10-24

• 5 Reasons PCI ASV Scans Fail (and How to Avoid Them) ↗ (opens in a new tab)

  Outpost24 · Published 2026-10-21 · First collected 2026-10-24

• Your MCU Likely Escaped the eMudhra Intermediate CA Compromise ↗ (opens in a new tab)

  Daniel Mangum · Published 2026-10-21 · First collected 2026-10-24

• Why people don’t report scams, and it’s not embarrassment ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-10-21 · First collected 2026-10-24

• aquaRömer relies on G DATA MXDR: “I’ve rarely seen such a smooth rollout” ↗ (opens in a new tab)

  G DATA Security Blog · Published 2026-10-21 · First collected 2026-10-24

• Threats Hidden in Replies: Threat Actors Deliver Malware and Credential Phishing in Email Threads ↗ (opens in a new tab)

  Cofense Intelligence · Published 2026-10-21 · First collected 2026-10-24

• CrowdStrike Protects Customers from Threats Delivered via PHP2Shell ↗ (opens in a new tab)

  CrowdStrike Blog · Published 2026-10-21 · First collected 2026-10-24

• Operation FlashHole: Lazarus breaks security, defies control ↗ (opens in a new tab)

  Kaspersky Securelist · Published 2026-10-21 · First collected 2026-10-24

• The Star Labs StarFighter is Qubes certified! ↗ (opens in a new tab)

  Qubes OS · Published 2026-10-21 · First collected 2026-10-24

• SVD-2026-1012: Third-Party Package Updates in Splunk SOAR - October 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-10-21 · First collected 2026-10-24

• HTTP 401 Unauthorized: What It Means and How to Fix It ↗ (opens in a new tab)

  Sucuri Blog · Published 2026-10-20 · First collected 2026-10-24

• WEEKLY ALL-SOURCE ESPIONAGE INTELLIGENCE BRIEF 10.20.2026 ↗ (opens in a new tab)

  Krypt3ia · Published 2026-10-20 · First collected 2026-10-24

• Doppelgänger Russian Influence Campaign in Israel ↗ (opens in a new tab)

  ClearSky Cyber Security · Published 2026-10-20 · First collected 2026-10-24

• Inside Wazza: A Newly Observed Device Code Phishing Kit Targeting Microsoft 365 Accounts ↗ (opens in a new tab)

  LevelBlue (SpiderLabs Blog) · Published 2026-10-20 · First collected 2026-10-24

• Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances ↗ (opens in a new tab)

  Eclypsium | Supply Chain Security for the Modern Enterprise · Published 2026-10-20 · First collected 2026-10-24

• How Do Financial Institutions Measure and Control Cyber Risk? ↗ (opens in a new tab)

  Aqua · Published 2026-10-20 · First collected 2026-10-24

• Protecting Firefox users following the compromise of eMudhra intermediate certificates ↗ (opens in a new tab)

  Mozilla Security Blog · Published 2026-10-20 · First collected 2026-10-24

• mtt.sh – Mounting Linux Images ↗ (opens in a new tab)

  Righteous IT · Published 2026-10-20 · First collected 2026-10-24

• Violations de données applicatives - Retour d’expérience du CERT-FR (20 octobre 2026) ↗ (opens in a new tab)

  CERT-FR threat intelligence · Published 2026-10-20 · First collected 2026-10-24