Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Welcome to the April 2026 Newsletter ↗ (opens in a new tab)

  Confidential Computing Consortium · Published 2026-05-05 · First collected 2026-10-24

• CVE-2026-34121: TP-Link HTTP authentication bypass ↗ (opens in a new tab)

  Taszk Labs on taszk.io labs · Published 2026-04-28 · First collected 2026-10-24

• Analyzing a full ClickFix attack chain (part 1) ↗ (opens in a new tab)

  Stormshield · Published 2026-04-23 · First collected 2026-10-24

• Floating Point Fun on Cortex-M Processors ↗ (opens in a new tab)

  Daniel Mangum · Published 2026-04-16 · First collected 2026-10-24

• BlueBrothers: Three New Protocols to Secure Bluetooth ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-04-16 · First collected 2026-10-24

• Cyber Threat Intelligence Framework ↗ (opens in a new tab)

  CERT-EU Threat Intelligence · Published 2026-04-08 · First collected 2026-10-24

• jq For Forensics ↗ (opens in a new tab)

  Righteous IT · Published 2026-04-06 · First collected 2026-10-24

• Authenticated Arbitrary File Read via Race Condition leads to 0-Click Account Take Over on n8n ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-03-19 · First collected 2026-10-24

• Global Scam Machines: Inside a Meta-Powered Investment Fraud Ecosystem Spanning 25 Countries ↗ (opens in a new tab)

  Bitdefender Labs · Published 2026-03-09 · First collected 2026-10-24

• Living off the Process ↗ (opens in a new tab)

  G3tSyst3m’s Infosec Blog · Published 2026-01-29 · First collected 2026-10-24

• Okta Pooled Security Audits: a One-Year Retrospective ↗ (opens in a new tab)

  Okta Security RSS Feed · Published 2026-01-12 · First collected 2026-10-24

• The Escape ↗ (opens in a new tab)

  Adam Caudill · Published 2026-01-01 · First collected 2026-10-24

• Fight bad bot with Sec Fetch and Client Hints inconsistencies in headless browsers ↗ (opens in a new tab)

  Sicuranext Blog · Published 2025-12-16 · First collected 2026-10-24

• sRDI for Linux: Stealthy In-Memory ELF Loading ↗ (opens in a new tab)

  jm33_ng · Published 2025-12-13 · First collected 2026-10-24

• Introducing Saved Searches in Google Threat Intelligence (GTI) and VirusTotal (VT): Enhance Collaboration and Efficiency ↗ (opens in a new tab)

  VirusTotal Blog · Published 2025-12-10 · First collected 2026-10-24

• A Remote Pre-Authentication Overflow in LLDB's debugserver ↗ (opens in a new tab)

  Objective-See's Blog · Published 2025-12-08 · First collected 2026-10-24

• The Nihilistic Cybersecurity Certification (NCC) exam ↗ (opens in a new tab)

  Cybersect · Published 2025-11-02 · First collected 2026-10-24

• YOLO detect security cameras ↗ (opens in a new tab)

  DiabloHorn · Published 2025-10-26 · First collected 2026-10-24

• Xakawin.com EXPOSED – Legit or Fake Casino? Investigation ↗ (opens in a new tab)

  MalwareTips Blog · Published 2026-10-26 · First collected 2026-10-26

• Non-profiled Single-Trace ML-DSA Secret Key Recovery by Horizontal Distribution Analysis ↗ (opens in a new tab)

  IACR News · Published 2026-10-26 · First collected 2026-10-26

• Where to Find Linux auditd Logs and How to Export Them ↗ (opens in a new tab)

  SOC Prime Blog · Published 2026-10-22 · First collected 2026-10-24

• Delivery bots accused of illegally scanning customers ↗ (opens in a new tab)

  Malwarebytes · Published 2026-10-22 · First collected 2026-10-24

• Industrial Defender Unifies Endpoint Intelligence & Network Monitoring for CIP-015, Adds Risk Signal ↗ (opens in a new tab)

  HackerNoon - cybersecurity · Published 2026-10-21 · First collected 2026-10-24

• HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait ↗ (opens in a new tab)

  Akamai Blog · Published 2026-10-21 · First collected 2026-10-24

• Petersburg Borough in Alaska discloses ransomware attack affecting utility billing ↗ (opens in a new tab)

  DysruptionHub · Published 2026-10-21 · First collected 2026-10-24

• MetaDefender™ Drive v4.4.9 Release: Real-Time Device Posture Checks, In-Session Policy Lockdown, and Controlled File Skipping for Faster Scans ↗ (opens in a new tab)

  OPSWAT Blog · Published 2026-10-20 · First collected 2026-10-24

• Strong on Controls, Light on Decisions: What We Heard at the 2026 ICS Cybersecurity Conference ↗ (opens in a new tab)

  Zscaler Research Blogs · Published 2026-10-16 · First collected 2026-10-24

• Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks ↗ (opens in a new tab)

  IT Security Guru · Published 2026-10-16 · First collected 2026-10-24

• Inside the Hunt: Sarah Reddish ↗ (opens in a new tab)

  Huntress Blog · Published 2026-10-16 · First collected 2026-10-24

• ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th) ↗ (opens in a new tab)

  SANS Internet Storm Center · Published 2026-10-16 · First collected 2026-10-24