Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Welcome to Thomas Païta and Paul Cercueil ↗ (opens in a new tab)
No alternative? A dangerous phrase for digital sovereignty ↗ (opens in a new tab)
Security Roundup August 2026 ↗ (opens in a new tab)
Open House: How an Unauthenticated MCP Server Exposed India's Largest Real Estate Platform | UpGuard ↗ (opens in a new tab)
Winner, Name that Ware July 2026 ↗ (opens in a new tab)
What's in a tag name? JavaScript, apparently ↗ (opens in a new tab)
Third-Party Script Security: How Tags, Pixels, and Embeds Can Put Websites at Risk ↗ (opens in a new tab)
What is Security Posture Management and Why is it Important? ↗ (opens in a new tab)
Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14% ↗ (opens in a new tab)
Threat Hunting Case Study: The Gentlemen ↗ (opens in a new tab)
New in THOR Cloud: SSO, Granular Permissions, and Account API Keys ↗ (opens in a new tab)
WordPress 7.0.3 release ↗ (opens in a new tab)
Introducing Tactics: See What Adversaries Do After They’re Inside ↗ (opens in a new tab)
Batten Down Your Packages: Mitigation Guidance for Supply Chain Compromise ↗ (opens in a new tab)
Tame Dependabot: Group your updates, slow the cadence, keep security fast ↗ (opens in a new tab)
Leadership Lessons from The Odyssey ↗ (opens in a new tab)
Introducing selfie for sign-in: a new, easy way to access your Google Account ↗ (opens in a new tab)
Analysing an Unexciting Commodity Malware ↗ (opens in a new tab)
From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks ↗ (opens in a new tab)
For seamless, secure stadium experiences, Wi-Fi wins ↗ (opens in a new tab)
IoT Penetration Testing Strategy ↗ (opens in a new tab)
Cyber Resilience Act – Part II ↗ (opens in a new tab)
Purple Teaming with Purpose: Stop Guessing and Start Testing ↗ (opens in a new tab)
The Road to Post-Quantum Readiness Part 2 of 2: The Migration Playbook ↗ (opens in a new tab)
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry ↗ (opens in a new tab)
macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox ↗ (opens in a new tab)
Best MAST Tools 2026: Mobile App Security Testing Compared | Appknox ↗ (opens in a new tab)
GhostPack Necromancy: Reforging C# Tools with WasmForge ↗ (opens in a new tab)
How Linux Malware Works, From Simple to Sophisticated ↗ (opens in a new tab)
BSides Leeds 2026 Badge - Firmware Exploration ↗ (opens in a new tab)