Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Statistical Report on Malware Targeting Linux SSH Servers in the Third Quarter of 2026 ↗ (opens in a new tab)

  ASEC · Published 2026-10-07 · First collected 2026-10-24

• Identifiable Face to Face for Privacy Protection ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-25 · First collected 2026-10-24

• Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026) ↗ (opens in a new tab)

  CERT-FR news · Published 2026-09-21 · First collected 2026-10-24

• US Coast Guard and FBI board oil tanker to investigate cyber attack ↗ (opens in a new tab)

  GRAHAM CLULEY · Published 2026-09-17 · First collected 2026-10-24

• Beware the SparroWock: The backdoor that bites, the commands that catch ↗ (opens in a new tab)

  WeLiveSecurity · Published 2026-09-17 · First collected 2026-10-24

• Tajin Group: Guarantee Marketplace Vendor Involved in Phishing and Chinese Money Laundering Group ↗ (opens in a new tab)

  Recorded Future – Main Feed · Published 2026-09-15 · First collected 2026-10-24

• Announcing the Sovereign Artifacts beta ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-09-15 · First collected 2026-10-24

• Risky Bulletin: Anthropic agents went hacking again ↗ (opens in a new tab)

  Risky Bulletin · Published 2026-09-11 · First collected 2026-10-24

• The Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement Action ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-09-03 · First collected 2026-10-24

• Manage multiple items easily with the new action bar ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-09-01 · First collected 2026-10-24

• Shai-Hulud worm arrests: Why this is not the end ↗ (opens in a new tab)

  ReversingLabs Blog · Published 2026-08-28 · First collected 2026-10-24

• Fewer lockouts, less manual work: What's new for 1Password EPM admins ↗ (opens in a new tab)

  Blog on 1Password Blog · Published 2026-08-26 · First collected 2026-10-24

• Turning Enterprise Update Servers Into Backdoor Factories (0_o) – Part 1 ↗ (opens in a new tab)

  SpecterOps · Published 2026-08-05 · First collected 2026-10-24

• Introducing the Runtime Remediation Skill for headless cloud security ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-07-31 · First collected 2026-10-24

• Weekly Threat Bulletin – July 29th, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-07-29 · First collected 2026-10-24

• When cyber attacks happen: helping organisations recover ↗ (opens in a new tab)

  UK NCSC blogs · Published 2026-07-28 · First collected 2026-10-24

• SVD-2026-0703: Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-07-15 · First collected 2026-10-24

• Introducing snowpick: Testing ServiceNow for Public Data Exposure ↗ (opens in a new tab)

  Bishopfox · Published 2026-07-14 · First collected 2026-10-24

• Not-so-anonymous telemetry: The @injectivelabs/sdk-ts backdoor ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-07-09 · First collected 2026-10-24

• IEC 62443 Part 4-1 Webinar | Build Secure IACS Products ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-07-07 · First collected 2026-10-24

• 從 Noob 到 Ambassador 的旅程 ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-05-28 · First collected 2026-10-24

• Turn Intelligence into Action Instantly with Retroactive Threat Detection on Verity471 ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-05-05 · First collected 2026-10-24

• Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-04-30 · First collected 2026-10-24

• PortSwigger partners with Meta Bug Bounty to empower bug hunters with training and Pro licenses ↗ (opens in a new tab)

  PortSwigger Blog · Published 2026-04-07 · First collected 2026-10-24

• Introducing C2 Detection: Know When Your Edge Devices Are Calling Home to Attackers ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-04-07 · First collected 2026-10-24

• VRP 2025 Year in Review ↗ (opens in a new tab)

  Google Online Security Blog · Published 2026-03-31 · First collected 2026-10-24

• Indicators of Compromise: Their Role in a Company’s Information Security ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-03-20 · First collected 2026-10-24

• How we’re helping you avoid scams this tax season ↗ (opens in a new tab)

  Safety & Security · Published 2026-03-19 · First collected 2026-10-24

• TVE-2026-03: Xiaomi miIO client heap buffer overflow ↗ (opens in a new tab)

  Taszk Labs on taszk.io labs · Published 2026-03-16 · First collected 2026-10-24

• Security Onion Documentation printed book now updated for Security Onion 2.4.210! ↗ (opens in a new tab)

  Security Onion · Published 2026-03-09 · First collected 2026-10-24