Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Hunt, Triage, and Act on Guard Findings in Slack ↗ (opens in a new tab)
The phone was compromised before the user turned it on: the rise of Midnight Mimosa ↗ (opens in a new tab)
Promotion in 2026 ↗ (opens in a new tab)
Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed. ↗ (opens in a new tab)
A Practical Guide to “Plug&Pwn” for Pentesters and Defenders ↗ (opens in a new tab)
: Erasable and Portable Cloud Storage With Oblivious Key Management ↗ (opens in a new tab)
Challenge - Not just another XSS (lab) ↗ (opens in a new tab)
Let’s Create A Function Stomping BOF for Adaptix C2! ↗ (opens in a new tab)
Cyber Brief 26-10 - September 2026 ↗ (opens in a new tab)
Pwn2Own Ireland 2025 – Home Assistant ↗ (opens in a new tab)
Post-Quantum Cryptography for Sigstore ↗ (opens in a new tab)
[tl;dr sec] #348 - Google's PageBreak Scanner, Perplexity's Agent Security Tool, Defending Agentically ↗ (opens in a new tab)
Name that Ware, September 2026 ↗ (opens in a new tab)
MITRE ATT&CK v19: What's changed, and how EclecticIQ helps you keep up ↗ (opens in a new tab)
A story of wifi secrets, UART lockdowns and a damaged flash memory chip ↗ (opens in a new tab)
Security Conference Websites Are Bad ↗ (opens in a new tab)
Welcome to Your New Home, Windows Server 2012! ↗ (opens in a new tab)
Testing BTRFS w/ Release Candidate Kernels on Arch Linux ↗ (opens in a new tab)
When IT Support Is the Attack: How Law Firms Can Defend Against Silent Ransom Group ↗ (opens in a new tab)
Loupe: An Android Console in the Browser ↗ (opens in a new tab)
Quote: Abraham Lincoln “You cannot escape the responsibility….” ↗ (opens in a new tab)
Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties ↗ (opens in a new tab)
2026 Péter Szőr Award shortlisted nominees ↗ (opens in a new tab)
Security Onion 3.3.0 Hotfix 20260911 Now Available! ↗ (opens in a new tab)
NetNTLMv1 Is Dead. Long Live NetNTLMv1. ↗ (opens in a new tab)
Securing the Modern Workforce: The Evolution of Cisco Umbrella ↗ (opens in a new tab)
Containers Don't Keep Secrets: Scanning Docker Hub for Leaked Credentials and Private Keys ↗ (opens in a new tab)
Welcome to the August 2026 Newsletter ↗ (opens in a new tab)
7 Best Practices for Database Security ↗ (opens in a new tab)
Stabbed, Not Erased: Reviving a Verschenkenkiste Harddrive ↗ (opens in a new tab)