Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Introducing pathrunner: An AWS privilege escalation framework ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-10-20 · First collected 2026-10-24

• MacOS Infostealer “adapts” to new Keychain Protection ↗ (opens in a new tab)

  pepe berba · Published 2026-10-20 · First collected 2026-10-24

• 19th October – Threat Intelligence Report ↗ (opens in a new tab)

  Check Point Research · Published 2026-10-19 · First collected 2026-10-24

• Breach of Confidence: 19 October 2026 ↗ (opens in a new tab)

  Javvad Malik · Published 2026-10-19 · First collected 2026-10-24

• Agents are your newest insiders. Security must move at their speed. ↗ (opens in a new tab)

  Microsoft Security Blog · Published 2026-10-19 · First collected 2026-10-24

• Slaiclind: analyzing a campaign combining ClickFix and EtherHiding ↗ (opens in a new tab)

  Stormshield · Published 2026-10-19 · First collected 2026-10-24

• The Much-Desired Massification of Cyber Resilience is Coming ↗ (opens in a new tab)

  Art Resilia · Published 2026-10-19 · First collected 2026-10-24

• Heartbreaker 💔 ↗ (opens in a new tab)

  Objective-See's Blog · Published 2026-10-18 · First collected 2026-10-24

• Anthropic’s Free OSS Scanner: What It Means For Your Team ↗ (opens in a new tab)

  From the Frog's mouth - JFrog Blog · Published 2026-10-16 · First collected 2026-10-24

• Web Scanning in Censys ASM Just Got Deeper ↗ (opens in a new tab)

  Censys · Published 2026-10-16 · First collected 2026-10-24

• Check if a text message is a scam using Circle to Search. ↗ (opens in a new tab)

  Safety & Security · Published 2026-10-15 · First collected 2026-10-24

• Linux C2 from Scratch 0x00: Processes, Syscalls, libc and TLS ↗ (opens in a new tab)

  jm33_ng · Published 2026-10-15 · First collected 2026-10-24

• Operation Fashion Weak ↗ (opens in a new tab)

  Sicuranext Blog · Published 2026-10-15 · First collected 2026-10-24

• Cisco and higher ed: building a foundation for future learning ↗ (opens in a new tab)

  Cisco Newsroom: Security · Published 2026-10-15 · First collected 2026-10-24

• Using TLS to protect data ↗ (opens in a new tab)

  UK NCSC guidance · Published 2026-10-15 · First collected 2026-10-24

• Investigating Ephemeral Supply Chain Tampering ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-10-15 · First collected 2026-10-24

• The GhostX Ecosystem: Forged in Transit, Licensed to Deceive ↗ (opens in a new tab)

  Cyble · Published 2026-10-15 · First collected 2026-10-24

• skynox7: Proxyjacking Edge Devices Into Residential Proxies ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-10-15 · First collected 2026-10-24

• Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-10-14 · First collected 2026-10-24

• Behind Closed Doors: How Physical Penetration Testing Secures Sensitive Conversations ↗ (opens in a new tab)

  Bishopfox · Published 2026-10-14 · First collected 2026-10-24

• Under CPS 234, Your APIs Are Information Assets. Can You Prove You're Protecting Them? ↗ (opens in a new tab)

  Salt Security Blog · Published 2026-10-14 · First collected 2026-10-24

• Iron Man & YamStore: Powering a Global Phishing-as-a-Service Ecosystem ↗ (opens in a new tab)

  Resecurity · Published 2026-10-14 · First collected 2026-10-24

• Introducing Chainguard Checks ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-10-14 · First collected 2026-10-24

• Releasing the Cobalt Strike Beacon Corpus ↗ (opens in a new tab)

  Fox-IT International blog · Published 2026-10-13 · First collected 2026-10-24

• Why you can’t afford to ignore supply chain security – part 2 ↗ (opens in a new tab)

  BH Consulting · Published 2026-10-13 · First collected 2026-10-24

• Mobile Application Security Testing Guide | Automated Mobile App Testing ↗ (opens in a new tab)

  Corellium Blog · Published 2026-10-12 · First collected 2026-10-24

• Wire Length vs. Buffer Bounds: An Out-of-Bounds Write in wolfSSL's Silicon Labs Port ↗ (opens in a new tab)

  ByteRay Blog · Published 2026-10-12 · First collected 2026-10-24

• Walkthrough: Meethack x RomHack Cyber Car Wash CTF ↗ (opens in a new tab)

  less on sec · Published 2026-10-11 · First collected 2026-10-24

• Below the Waterline Stage 2 - Regulating Red Teams ↗ (opens in a new tab)

  ZephrSec - Adventures In Information Security · Published 2026-10-11 · First collected 2026-10-24

• We can harden C ↗ (opens in a new tab)

  Cybersect · Published 2026-10-09 · First collected 2026-10-24