Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• One breach, please, and make no mistakes ↗ (opens in a new tab)

  Cisco Talos Blog · Published 2026-10-07 · First collected 2026-10-24

• Inside a brand deal scam targeting YouTube creators ↗ (opens in a new tab)

  WeLiveSecurity · Published 2026-10-07 · First collected 2026-10-24

• SVD-2026-1003: Third-Party Package Updates in Splunk Enterprise - September/October 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-10-07 · First collected 2026-10-24

• Announcing the Chainguard Compliance Dashboard ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-10-07 · First collected 2026-10-24

• CrocoRat Adds a New Twist to ClickFix with DNS Payload Delivery ↗ (opens in a new tab)

  Blog Archives - Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime · Published 2026-10-06 · First collected 2026-10-24

• Sonar Vortex is now available on SonarQube Server ↗ (opens in a new tab)

  Sonar Blog · Published 2026-10-06 · First collected 2026-10-24

• Blinder Tunnel Campaign Targets Iraqi Infrastructure ↗ (opens in a new tab)

  Unit 42 · Published 2026-10-06 · First collected 2026-10-24

• DLP Inspection Where Your Agents Run: Extending Symantec DLP to Tetrate Agent Router ↗ (opens in a new tab)

  Broadcom – Symantec Blogs · Published 2026-10-06 · First collected 2026-10-24

• 47-Day Certificates Are Coming: Five Things to Do Before They Arrive ↗ (opens in a new tab)

  Imperva Blog · Published 2026-10-05 · First collected 2026-10-24

• Building a strong security stack ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-10-02 · First collected 2026-10-24

• Milk Dragon: Huge Discounts on Social Media? Think Twice Before You Buy ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-10-01 · First collected 2026-10-24

• Building a certificate authority for the whole Internet ↗ (opens in a new tab)

  Cloudflare – Security Tag · Published 2026-09-29 · First collected 2026-10-24

• The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-09-29 · First collected 2026-10-24

• Qubes OS Summit 2026: Freedom of the Press Foundation and NovaCustom sponsorships; conference schedule available! ↗ (opens in a new tab)

  Qubes OS · Published 2026-09-27 · First collected 2026-10-24

• Verifiable Delegation of Private Set Unions Over Dynamic Sets ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-25 · First collected 2026-10-24

• What's New in hate_crack Since 2.0 ↗ (opens in a new tab)

  TrustedSec · Published 2026-09-24 · First collected 2026-10-24

• Slow is a design principle, not a delay ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-09-22 · First collected 2026-10-24

• From Payment Plan to Ransomware - Inside a Global Group Attack ↗ (opens in a new tab)

  Cofense Intelligence · Published 2026-09-22 · First collected 2026-10-24

• Meet ONEKEY at ELIV Congress 2026 ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-09-22 · First collected 2026-10-24

• Weekly ALL-SOURCE Cyber Warfare Intelligence Brief 9.21.26 ↗ (opens in a new tab)

  Krypt3ia · Published 2026-09-21 · First collected 2026-10-24

• 10 Lessons Reshaping Security After Black Hat and DEF CON 2026 ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-09-21 · First collected 2026-10-24

• MikroTrick: Inside the RouterOS Takeover Chain ↗ (opens in a new tab)

  Bishopfox · Published 2026-09-17 · First collected 2026-10-24

• Adversary simulation: what you need to know ↗ (opens in a new tab)

  UK NCSC guidance · Published 2026-09-17 · First collected 2026-10-24

• Getting started with runtime security and Falco ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-09-17 · First collected 2026-10-24

• Weekly Threat Bulletin – September 16th, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-09-16 · First collected 2026-10-24

• Mapping out your unknown: A threat hunter’s guide to GitHub ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-09-16 · First collected 2026-10-24

• Mythic C2 Activity at Internet Scale ↗ (opens in a new tab)

  Censys · Published 2026-09-15 · First collected 2026-10-24

• 14th September – Threat Intelligence Report ↗ (opens in a new tab)

  Check Point Research · Published 2026-09-14 · First collected 2026-10-24

• Group of Bipartisan Lawmakers Ask US Government to Ban Several Hack-for-Hire Firms ↗ (opens in a new tab)

  The Citizen Lab · Published 2026-09-10 · First collected 2026-10-24

• Beyond Tier Zero ↗ (opens in a new tab)

  SpecterOps · Published 2026-09-10 · First collected 2026-10-24