Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Weekly Threat Bulletin – August 5th, 2026 ↗ (opens in a new tab)
Security briefing: July 2026 ↗ (opens in a new tab)
Making forensic observability the norm for network devices ↗ (opens in a new tab)
CRA Phase I Webinar: Incident Reporting & Operational Readiness | ONEKEY ↗ (opens in a new tab)
Using MCP Agents for Penetration Testing ↗ (opens in a new tab)
SVD-2026-0704: Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise ↗ (opens in a new tab)
Has a nation-state pwned your routers? ↗ (opens in a new tab)
Compromised AsyncAPI npm packages: inside a CI supply-chain attack ↗ (opens in a new tab)
What Live Cybersecurity Training Reveals That Self-Paced Learning Doesn’t ↗ (opens in a new tab)
What CISOs want from Cyber Threat Intelligence ↗ (opens in a new tab)
Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities ↗ (opens in a new tab)
Introducing the official Burp Ambassador Program ↗ (opens in a new tab)
Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet ↗ (opens in a new tab)
Google Workspace’s continuous approach to mitigating indirect prompt injections ↗ (opens in a new tab)
Quantum frontiers may be closer than they appear ↗ (opens in a new tab)
Hunting after Rogue System Administrators with a SIEM System ↗ (opens in a new tab)
TVE-2026-02: Xiaomi miIO client cryptographically weak PRNG ↗ (opens in a new tab)
Security Onion 3.0 Coming Soon! ↗ (opens in a new tab)
BLERP: BLE Re-Pairing Attacks and Defenses ↗ (opens in a new tab)
Developer Tools & Productivity ↗ (opens in a new tab)
Stopping Redirects ↗ (opens in a new tab)
Make it Possible, Then Make it Normal ↗ (opens in a new tab)
Evelano.com EXPOSED – Fake Store or Legit? What We Found ↗ (opens in a new tab)
Revisiting AES Key Wrap: Forgery Bounds, Structural Observations, and Recommendations for the Revision of NIST SP 800-38F ↗ (opens in a new tab)
A sextortion conspiracy killed his son (Lock and Code S07E21) ↗ (opens in a new tab)
10 Endpoint Security Trends and Tips for 2027 | Huntress ↗ (opens in a new tab)
How Malicious Files Reach Microsoft Teams Through Email ↗ (opens in a new tab)
The Safer Internet Lie: Why More Surveillance Isn't Making Anyone Safer ↗ (opens in a new tab)
Navigating Security in the Nordics and Baltics: Meet Annika Grönström ↗ (opens in a new tab)
The October 2026 Root KSK Rollover: Is Your DNS Really Ready? ↗ (opens in a new tab)