Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• CTRAPS on the DEF CON 33 Hackers' Almanack ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-02-14 · First collected 2026-10-24

• Man of the Sea ↗ (opens in a new tab)

  Adam Caudill · Published 2025-12-04 · First collected 2026-10-24

• Challenge Two - Writeup For Stranger XSS ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2025-12-01 · First collected 2026-10-24

• Interesting SPI Routing with iCE40 FPGAs ↗ (opens in a new tab)

  Daniel Mangum · Published 2025-11-07 · First collected 2026-10-24

• Evanaa.net EXPOSED – Fake or Real? Store Investigation ↗ (opens in a new tab)

  MalwareTips Blog · Published 2026-10-26 · First collected 2026-10-26

• A Kelsey–Kohno Attack Variant against SHA-2 Message Digests in HSS/LMS and XMSS ↗ (opens in a new tab)

  IACR News · Published 2026-10-26 · First collected 2026-10-26

• Millions of California students’ sensitive data stolen in breach ↗ (opens in a new tab)

  Malwarebytes · Published 2026-10-19 · First collected 2026-10-24

• Business Email Compromise (BEC) Attacks: How to Stop Them ↗ (opens in a new tab)

  Huntress Blog · Published 2026-10-14 · First collected 2026-10-24

• Beyond the Preamble: Securing Encapsulated Data in DICOM Files ↗ (opens in a new tab)

  OPSWAT Blog · Published 2026-10-11 · First collected 2026-10-24

• Length Extension Attacks: How Hash-Based Signatures Can Be Forged ↗ (opens in a new tab)

  HackerNoon - cybersecurity · Published 2026-10-09 · First collected 2026-10-24

• Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware ↗ (opens in a new tab)

  Zscaler Research Blogs · Published 2026-10-08 · First collected 2026-10-24

• Why API Security Belongs in ECB Cyber Action Plans ↗ (opens in a new tab)

  Akamai Blog · Published 2026-10-07 · First collected 2026-10-24

• Q3 2026 Attack Techniques Trend Report ↗ (opens in a new tab)

  ASEC · Published 2026-10-06 · First collected 2026-10-24

• TRAPShield: Real-Time APT File Theft Defense With Multi-Domain Behavioral Characterization and Transparent Decoy Redirection ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-22 · First collected 2026-10-24

• Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026) ↗ (opens in a new tab)

  CERT-FR news · Published 2026-09-21 · First collected 2026-10-26

• Smashing Security podcast #485: These researchers got drunk to hack an LG TV ↗ (opens in a new tab)

  GRAHAM CLULEY · Published 2026-09-16 · First collected 2026-10-24

• Cyberthreats are moving faster than SMBs: Readiness must accelerate ↗ (opens in a new tab)

  WeLiveSecurity · Published 2026-09-16 · First collected 2026-10-24

• The flood is coming and the pipes were already full ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-09-15 · First collected 2026-10-24

• What is Proactive Threat Intelligence? | Recorded Future ↗ (opens in a new tab)

  Recorded Future – Main Feed · Published 2026-09-14 · First collected 2026-10-24

• Srsly Risky Biz: America's drivers licence breach is a national security disaster ↗ (opens in a new tab)

  Risky Bulletin · Published 2026-09-10 · First collected 2026-10-24

• Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-08-31 · First collected 2026-10-24

• August 2026 product update for Bitwarden Business plans ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-08-31 · First collected 2026-10-24

• Extend CrowdStrike Falcon with Permanent Intelligence ↗ (opens in a new tab)

  ReversingLabs Blog · Published 2026-08-27 · First collected 2026-10-24

• Developer secrets management that keeps delivery moving ↗ (opens in a new tab)

  Blog on 1Password Blog · Published 2026-08-17 · First collected 2026-10-24

• Turning Enterprise Update Servers Into Backdoor Factories (0_o) – Part 2 ↗ (opens in a new tab)

  SpecterOps · Published 2026-08-05 · First collected 2026-10-24

• Introducing the SysQL Skill: Ask your security graph anything. ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-07-30 · First collected 2026-10-24

• Weekly Threat Bulletin – July 22nd, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-07-22 · First collected 2026-10-24

• SVD-2026-0702: SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-07-15 · First collected 2026-10-24

• Coordinated GitHub API enumeration and access token abuse ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-07-08 · First collected 2026-10-24

• On Favicons: From Browser Icons to Attack Surface Intelligence ↗ (opens in a new tab)

  Bishopfox · Published 2026-07-02 · First collected 2026-10-24