Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• sbom-cve-check 1.3.2 and 1.3.3: improved SBOM handling and more robust CVE analysis ↗ (opens in a new tab)

  Bootlin · Published 2026-08-26 · First collected 2026-10-24

• Knowing what not to attack ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-08-25 · First collected 2026-10-24

• The unforeseen risks of exposed IP cameras ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-20 · First collected 2026-10-24

• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-08-20 · First collected 2026-10-24

• SVD-2026-0805: Third-Party Package Updates in Splunk SOAR - August 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-08-19 · First collected 2026-10-24

• Breach of Confidence: 07 August 2026 ↗ (opens in a new tab)

  Javvad Malik · Published 2026-08-07 · First collected 2026-10-24

• Detecting Certighost (CVE-2026-54121): Sigma Coverage Across the Full Attack Chain ↗ (opens in a new tab)

  Nextron Systems · Published 2026-08-04 · First collected 2026-10-24

• Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks ↗ (opens in a new tab)

  Blog RSS Feed | Snyk · Published 2026-08-04 · First collected 2026-10-24

• Influence Operations Bulletin Q2 2026 ↗ (opens in a new tab)

  Google Security · Published 2026-07-31 · First collected 2026-10-24

• Emerging Threat: QuimaRAT ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-07-15 · First collected 2026-10-24

• A Quick Guide to Penetration Testing ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-07-09 · First collected 2026-10-24

• Heading to Vegas? Meet PortSwigger at Black Hat, BSides, and DEF CON 34. ↗ (opens in a new tab)

  PortSwigger Blog · Published 2026-07-09 · First collected 2026-10-24

• Cortex Security Audit ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-07-05 · First collected 2026-10-24

• Google’s Continued Disruption of Malicious Residential Proxy Networks ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-07-02 · First collected 2026-10-24

• 4 Ways GreyNoise Improves SOC Outcomes ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-06-04 · First collected 2026-10-24

• Breaking Confinement: How a Corrections Vendor Exposed Inmate Communications | UpGuard ↗ (opens in a new tab)

  UpGuard – Breaches · Published 2026-06-02 · First collected 2026-10-24

• Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-05-22 · First collected 2026-10-24

• Introducing RAPTR ↗ (opens in a new tab)

  Compass Security Blog · Published 2026-05-11 · First collected 2026-10-24

• 5 helpful tools from Google to keep your accounts safe ↗ (opens in a new tab)

  Safety & Security · Published 2026-05-07 · First collected 2026-10-24

• TVE-2026-04: TP-Link HTTP authentication bypass ↗ (opens in a new tab)

  Taszk Labs on taszk.io labs · Published 2026-04-28 · First collected 2026-10-24

• Early Bird Discount for "Security Onion for Analysts and Threat Hunters" Class Running Virtually in August 2026! ↗ (opens in a new tab)

  Security Onion · Published 2026-04-21 · First collected 2026-10-24

• Neo v. DIY: The gap between a single finding and a mature security program ↗ (opens in a new tab)

  ProjectDiscovery Blog · Published 2026-04-17 · First collected 2026-10-24

• MaDoS: Matter DoS Attacks via Secure Channel Status Reports ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-03-31 · First collected 2026-10-24

• Roll Your Own... LMS ↗ (opens in a new tab)

  ZephrSec - Adventures In Information Security · Published 2026-03-14 · First collected 2026-10-24

• Slacker Slash: Bypassing Bun Security Middleware via Normalization Desync ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-03-13 · First collected 2026-10-24

• Linux Notes: ls and Timestamps ↗ (opens in a new tab)

  Righteous IT · Published 2026-03-06 · First collected 2026-10-24

• Cyber Brief 26-03 - February 2026 ↗ (opens in a new tab)

  CERT-EU Threat Intelligence · Published 2026-03-02 · First collected 2026-10-24

• Fooling Go's X.509 Certificate Verification ↗ (opens in a new tab)

  Daniel Mangum · Published 2026-03-01 · First collected 2026-10-24

• Helpful Skills or Hidden Payloads? Bitdefender Labs Dives Deep into the OpenClaw Malicious Skill Trap ↗ (opens in a new tab)

  Bitdefender Labs · Published 2026-02-05 · First collected 2026-10-24

• Is Long-form Writing Dead? ↗ (opens in a new tab)

  Adam Caudill · Published 2025-12-29 · First collected 2026-10-24