Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• From Findings to Fixes: Getting Value from Red Team Results ↗ (opens in a new tab)

  SpecterOps · Published 2026-09-08 · First collected 2026-10-24

• Bootlin’s Yocto training course updated to Wrynose ↗ (opens in a new tab)

  Bootlin · Published 2026-09-04 · First collected 2026-10-24

• Shift Browser is signed adware that fingerprints your endpoint before it drops payload ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-09-03 · First collected 2026-10-24

• Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon ↗ (opens in a new tab)

  Check Point Research · Published 2026-09-02 · First collected 2026-10-24

• Password spraying campaign targets AWS root user accounts across 150+ organizations ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-08-31 · First collected 2026-10-24

• Breach of Confidence — 28 August 2026 ↗ (opens in a new tab)

  Javvad Malik · Published 2026-08-28 · First collected 2026-10-24

• Simmering in the hot alphabet soup of vuln management ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-27 · First collected 2026-10-24

• Road to OSCE3: Episodio 1 – OSEP ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-08-25 · First collected 2026-10-24

• Frequently asked questions about the active threat to Siemens S7 Series PLCs ↗ (opens in a new tab)

  Tenable Cyber Exposure Alerts · Published 2026-08-20 · First collected 2026-10-24

• No PoC, No Problem: Rediscovering CVE-2025-29902 in the Telex RDC Server ↗ (opens in a new tab)

  Black Hills Information Security, Inc. · Published 2026-08-12 · First collected 2026-10-24

• The multi-layered defenses that harden Chrome against abusive notifications ↗ (opens in a new tab)

  Google Security · Published 2026-08-11 · First collected 2026-10-24

• Bypassing Android Hardware Attestation from the Analyst's Chair ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-08-10 · First collected 2026-10-24

• New in THOR Cloud: SSO, Granular Permissions, and Account API Keys ↗ (opens in a new tab)

  Nextron Systems · Published 2026-08-10 · First collected 2026-10-24

• Stop The Sprawl Snyk Secrets Now Generally Available ↗ (opens in a new tab)

  Blog RSS Feed | Snyk · Published 2026-08-04 · First collected 2026-10-24

• Burp's new Ambassadors: learn from the people who use Burp Suite everyday ↗ (opens in a new tab)

  PortSwigger Blog · Published 2026-07-17 · First collected 2026-10-24

• Operation Fake KickOff: Attackers Abuse Recruiters and SaaS to Harvest Work Credentials ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-07-15 · First collected 2026-10-24

• Should cyber insurance be part of your business backup plan? ↗ (opens in a new tab)

  BH Consulting · Published 2026-07-14 · First collected 2026-10-24

• White Box Penetration Testing: Essence, Value, Techniques ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-07-09 · First collected 2026-10-24

• The ‘Ghost’ in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-07-07 · First collected 2026-10-24

• Own Goal: Inside the Cyber Risks of the 2026 World Cup | UpGuard ↗ (opens in a new tab)

  UpGuard – Breaches · Published 2026-07-06 · First collected 2026-10-24

• We Trained Cybersecurity Startups to Win POVs, Not Solve Problems ↗ (opens in a new tab)

  Salt Security Blog · Published 2026-06-22 · First collected 2026-10-24

• 5 Things I Show Every SOC Team When We Wire GreyNoise Into Their SOAR ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-06-17 · First collected 2026-10-24

• Best Mobile API Security Testing Tools for CI/CD | Appknox ↗ (opens in a new tab)

  Appknox Blog · Published 2026-06-16 · First collected 2026-10-24

• The Anubis Ransomware Attack on the Adriatic Port Authority ↗ (opens in a new tab)

  Resecurity · Published 2026-06-11 · First collected 2026-10-24

• The Detection & Response Chronicles: Covert Operations Through QEMU ↗ (opens in a new tab)

  NVISO Labs · Published 2026-06-04 · First collected 2026-10-24

• SSH Labs ↗ (opens in a new tab)

  Compass Security Blog · Published 2026-05-27 · First collected 2026-10-24

• Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-05-26 · First collected 2026-10-24

• LABScon25 Replay | Breach Alpha: Trading on Cyber Fallout ↗ (opens in a new tab)

  SentinelOne Labs · Published 2026-05-14 · First collected 2026-10-24

• Our fight against fraud: 5 ways we’re keeping you safer ↗ (opens in a new tab)

  Safety & Security · Published 2026-05-13 · First collected 2026-10-24

• CVE-2026-34124: TP-Link HTTP GET stack buffer overflow ↗ (opens in a new tab)

  Taszk Labs on taszk.io labs · Published 2026-04-28 · First collected 2026-10-24