Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Traefik | Version Through 3.7.11 ↗ (opens in a new tab)
Why SpecterOps Signed OpenAI’s Call for Collective Cyber Defense ↗ (opens in a new tab)
50+ insider threat statistics for 2026 ↗ (opens in a new tab)
Disruptive cyber activity highlights risk from internet-exposed systems and edge devices ↗ (opens in a new tab)
Weekly Threat Bulletin – August 26th, 2026 ↗ (opens in a new tab)
Putting models to the secure coding test: Plan vs default mode ↗ (opens in a new tab)
SVD-2026-0803: Third-Party Package Updates in Splunk Universal Forwarder - August 2026 ↗ (opens in a new tab)
How the runZero Yetis took over Hacker Summer Camp 2026 ↗ (opens in a new tab)
What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security ↗ (opens in a new tab)
Evo Continuous Offensive Security Is Here Pentesting Grade Coverage For The 350 Days A Year You Aren't Testing ↗ (opens in a new tab)
Going Beyond Zero: A New Paradigm For Enterprise Security ↗ (opens in a new tab)
Management Center 4.1: More Resilient. More Secure. Ready for THOR 11 ↗ (opens in a new tab)
Threat Hunting Case Study: Scattered Spider ↗ (opens in a new tab)
The Bear Necessities: A Look at the Drivers, Dynamics, and Applications of the Pro-Russia Influence Ecosystem ↗ (opens in a new tab)
Burp Extensibility 2026: Awards, Talks, and Highlights ↗ (opens in a new tab)
Black Box Probing: a Security Analysis of Xiaomi's MJA1 Secure Chip ↗ (opens in a new tab)
Security Essentials in Microsoft Azure ↗ (opens in a new tab)
The Coverage Gap: Why Your Blocklist Is Missing 119,000 Malicious IPs Today ↗ (opens in a new tab)
Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud ↗ (opens in a new tab)
Shared Context: How an MCP Server Exposed a Private Equity Firm | UpGuard ↗ (opens in a new tab)
TVE-2026-05: TP-Link offline password bruteforce ↗ (opens in a new tab)
3 new ways Ads Advisor is making Google Ads safer and faster ↗ (opens in a new tab)
Security Onion 2.4.211 Hotfix 20260407 Now Available! ↗ (opens in a new tab)
BLERP Peripheral Impersonation Attack Demo ↗ (opens in a new tab)
Inside the benchmark: app architectures, walkthroughs of findings, and what each scanner actually caught ↗ (opens in a new tab)
LTR101 - Getting into Industry in 2026 ↗ (opens in a new tab)
Can a Predicted `window.open` Target Really Be That Impactful? ↗ (opens in a new tab)
Making Ferrite Core Inductors at Home ↗ (opens in a new tab)
Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery ↗ (opens in a new tab)
25% Unemployment in Tech? ↗ (opens in a new tab)