Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Weekly Threat Bulletin – August 19th, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-08-19 · First collected 2026-10-24

• SVD-2026-0802: Third-Party Package Updates in Splunk Enterprise - August 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-08-19 · First collected 2026-10-24

• How BitLocker PINs help protect your data and devices ↗ (opens in a new tab)

  UK NCSC blogs · Published 2026-08-13 · First collected 2026-10-24

• 'ChainDrop' worm compromises hundreds of popular npm packages ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-08-04 · First collected 2026-10-24

• Uncovering the invisible: meet runZero at DoDIIS ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-02 · First collected 2026-10-24

• How Federal Agencies Can Turn Year-End Funding Into Long-Term Cyber Capability ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-07-31 · First collected 2026-10-24

• Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code ↗ (opens in a new tab)

  Blog RSS Feed | Snyk · Published 2026-07-30 · First collected 2026-10-24

• Anatomy of a WHQL-Signed Windows Filtering Platform (WFP) Kernel-Resident Network Backdoor ↗ (opens in a new tab)

  Nextron Systems · Published 2026-06-26 · First collected 2026-10-24

• STOCKSTAY Another Day: The Latest Addition to Turla’s Intelligence Gathering Apparatus ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-06-25 · First collected 2026-10-24

• Making the Business Case for Your CTI Budget ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-06-10 · First collected 2026-10-24

• Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-06-08 · First collected 2026-10-24

• How Android helps keep you safe from impersonation scams with fake call detection ↗ (opens in a new tab)

  Google Security · Published 2026-06-02 · First collected 2026-10-24

• A New SonicWall Scanning Spike Echoes the Pattern That Preceded CVE-2026-0400 ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-05-21 · First collected 2026-10-24

• Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-05-13 · First collected 2026-10-24

• The beast needs a cage: What's next for AppSec post-Mythos ↗ (opens in a new tab)

  PortSwigger Blog · Published 2026-05-12 · First collected 2026-10-24

• Read Receipts: How Mail Server Logs Put Corporate Clients at Risk | UpGuard ↗ (opens in a new tab)

  UpGuard – Breaches · Published 2026-04-30 · First collected 2026-10-24

• VE-2026-34122: TP-Link HTTP DS stack buffer overflow ↗ (opens in a new tab)

  Taszk Labs on taszk.io labs · Published 2026-04-28 · First collected 2026-10-24

• Here’s how we built Gmail to keep your data secure and private in the Gemini era. ↗ (opens in a new tab)

  Safety & Security · Published 2026-04-07 · First collected 2026-10-24

• 6 month EOL notice for Security Onion 2.4 ↗ (opens in a new tab)

  Security Onion · Published 2026-04-01 · First collected 2026-10-24

• Source Code Review vs. Penetration Testing for Web Application Security ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-03-20 · First collected 2026-10-24

• E-Trojans Black Hat USA 25 Video ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-03-18 · First collected 2026-10-24

• Azure DevOps Agent Interception ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-02-10 · First collected 2026-10-24

• Announcing the ProjectDiscovery OSS Bounty Program ↗ (opens in a new tab)

  ProjectDiscovery Blog · Published 2026-02-02 · First collected 2026-10-24

• 3,500 Miles in 2025 ↗ (opens in a new tab)

  Daniel Mangum · Published 2026-01-19 · First collected 2026-10-24

• 2025 - Excelling at the Edge of Burnout ↗ (opens in a new tab)

  ZephrSec - Adventures In Information Security · Published 2025-12-25 · First collected 2026-10-24

• Welcoming Kessler ↗ (opens in a new tab)

  Adam Caudill · Published 2025-12-21 · First collected 2026-10-24

• Fake Leonardo DiCaprio Movie Torrent Drops Agent Tesla Through Layered PowerShell Chain ↗ (opens in a new tab)

  Bitdefender Labs · Published 2025-12-10 · First collected 2026-10-24

• Evanaa.net EXPOSED – Fake or Real? Store Investigation ↗ (opens in a new tab)

  MalwareTips Blog · Published 2026-10-26 · First collected 2026-10-26

• Private Information Retrieval with Accountability at Erasure-Optimal Server Redundancy ↗ (opens in a new tab)

  IACR News · Published 2026-10-26 · First collected 2026-10-26

• Google may add your number to all your accounts: How to stop it ↗ (opens in a new tab)

  Malwarebytes · Published 2026-10-20 · First collected 2026-10-24