Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Qubes OS 4.3.2 has been released! ↗ (opens in a new tab)

  Qubes OS · Published 2026-10-02 · First collected 2026-10-24

• 6 ways Advanced Protection on Android keeps you safe ↗ (opens in a new tab)

  Google Security · Published 2026-10-01 · First collected 2026-10-24

• Insights from the 2026 Microsoft Digital Defense Report ↗ (opens in a new tab)

  Microsoft Security Blog · Published 2026-10-01 · First collected 2026-10-24

• HashcatRosetta: Reading the Rosetta Stone of Password Cracking ↗ (opens in a new tab)

  TrustedSec · Published 2026-10-01 · First collected 2026-10-24

• Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-09-30 · First collected 2026-10-24

• OpenSSF Newsletter – September 2026 ↗ (opens in a new tab)

  Open Source Security Foundation · Published 2026-09-30 · First collected 2026-10-24

• Point de situation de l’opération REACTIV – septembre 2026 (30 septembre 2026) ↗ (opens in a new tab)

  CERT-FR threat intelligence · Published 2026-09-30 · First collected 2026-10-24

• CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-09-28 · First collected 2026-10-24

• 2026-09-24: Files for an ISC Diary (Macfinger ClickFix activity) ↗ (opens in a new tab)

  Malware-Traffic-Analysis.net (Blog Entries) · Published 2026-09-25 · First collected 2026-10-24

• Weakly-Supervised Prompt-Guided Privacy Enhancement for Soft-Biometric Attributes in Facial Images ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-25 · First collected 2026-10-24

• Enumerating Users and MFA via Microsoft's Password Reset Portal ↗ (opens in a new tab)

  LevelBlue (SpiderLabs Blog) · Published 2026-09-23 · First collected 2026-10-24

• Beyond Human Risk: A Better Way to Build Secure Behavior ↗ (opens in a new tab)

  Cofense Intelligence · Published 2026-09-23 · First collected 2026-10-24

• 2026 State of PQC on the Web ↗ (opens in a new tab)

  F5 Labs All · Published 2026-09-22 · First collected 2026-10-24

• Submission to the Immigration and Refugee Board of Canada ↗ (opens in a new tab)

  The Citizen Lab · Published 2026-09-22 · First collected 2026-10-24

• Slow is a design principle, not a delay ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-09-22 · First collected 2026-10-24

• it-sa 2026: ONEKEY live erleben ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-09-22 · First collected 2026-10-24

• Weekly ALL-SOURCE Cyber Warfare Intelligence Brief 9.21.26 ↗ (opens in a new tab)

  Krypt3ia · Published 2026-09-21 · First collected 2026-10-24

• One does not simply defend agentically ↗ (opens in a new tab)

  UK NCSC blogs · Published 2026-09-21 · First collected 2026-10-24

• From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion ↗ (opens in a new tab)

  Bishopfox · Published 2026-09-18 · First collected 2026-10-24

• Every regulatory disclosure rule asks the same question. Each calls it something else ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-09-18 · First collected 2026-10-24

• Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-09-18 · First collected 2026-10-24

• Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026 ↗ (opens in a new tab)

  Cyble · Published 2026-09-17 · First collected 2026-10-24

• Why Is Detection and Response Too Slow for Machine Speed Attacks? ↗ (opens in a new tab)

  Aqua · Published 2026-09-16 · First collected 2026-10-24

• NightEagle targets Russian companies ↗ (opens in a new tab)

  Kaspersky Securelist · Published 2026-09-16 · First collected 2026-10-24

• Overview of Passive Optical Networks (PONs) Security ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-09-15 · First collected 2026-10-24

• Lights Out: The server in your server, exposed and disclosed ↗ (opens in a new tab)

  runZero Blog · Published 2026-09-15 · First collected 2026-10-24

• 14th September – Threat Intelligence Report ↗ (opens in a new tab)

  Check Point Research · Published 2026-09-14 · First collected 2026-10-24

• Breach of Confidence — 11 September 2026 ↗ (opens in a new tab)

  Javvad Malik · Published 2026-09-11 · First collected 2026-10-24

• Unmasking SCCM Application Execution ↗ (opens in a new tab)

  SpecterOps · Published 2026-09-10 · First collected 2026-10-24

• Soar 101: Security, Orchestration, Automation, and Response ↗ (opens in a new tab)

  Black Hills Information Security, Inc. · Published 2026-09-09 · First collected 2026-10-24