Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Ransom & Dark Web Issues Week 1, October 2026 ↗ (opens in a new tab)
VeriFPHM: Robust and Trustworthy Harmful Media Detection in End-to-End Encrypted Communication ↗ (opens in a new tab)
Bulletin d'actualité CERTFR-2026-ACT-039 (14 septembre 2026) ↗ (opens in a new tab)
‘Anne Hathaway’ admits leading $245 million crypto theft gang that spent a fortune on nightclubs, watches, and luxury cars ↗ (opens in a new tab)
Recorded Future Launches Digital Risk Protection, Unifying Brand and Identity Monitoring ↗ (opens in a new tab)
Risky Bulletin: BEC campaign steals €35 million from French notaries ↗ (opens in a new tab)
How financial services companies can modernize their software supply chain ↗ (opens in a new tab)
I’ve been deepfaked: What do I do? ↗ (opens in a new tab)
Tortoiseshell: New Toolset and Operational Infrastructure Exposed ↗ (opens in a new tab)
How to back up a Bitwarden vault ↗ (opens in a new tab)
Why software delivery cannot depend on trust alone ↗ (opens in a new tab)
Advisory Solutions reaches 1Password Certified Partner status ↗ (opens in a new tab)
Weaponizing Windows Updates with NotWSUSpicious ↗ (opens in a new tab)
Weekly Threat Bulletin – July 15th, 2026 ↗ (opens in a new tab)
Backdoors & Breaches: New scenarios and adaptations ↗ (opens in a new tab)
The Smash-and-Grab Era ↗ (opens in a new tab)
TeamPCP Supply Chain Attacks ↗ (opens in a new tab)
How SIEM Helps to Reveal Ransomware in the Workplace, and Why Go For It ↗ (opens in a new tab)
PortSwigger X Intigriti: Burp Suite Professional licenses up for grabs with this new collaboration ↗ (opens in a new tab)
GreyNoise Integrates with Google Security Operations to Enhance Detection and Response Capabilities ↗ (opens in a new tab)
Staying One Step Ahead: Strengthening Android’s Lead in Scam Protection ↗ (opens in a new tab)
New Video: Introduction to Security Onion 2.4 ↗ (opens in a new tab)
CTRAPS: CTAP Impersonation and API Confusion on FIDO2 ↗ (opens in a new tab)
Provisioning and managing certificates in the Web PKI ↗ (opens in a new tab)
Challenge Two - Stranger XSS ↗ (opens in a new tab)
Jellytoysza.com EXPOSED – Safe Store or Scam? Our Findings ↗ (opens in a new tab)
Chosen Commitments and Certified Decoding Regions in the Adaptive Threshold Schnorr Attack ↗ (opens in a new tab)
Eiliko robot companion exposes private chats and can be hijacked ↗ (opens in a new tab)
ClickFix to BEC in 24 Hours: Tragic Quadrant | Huntress ↗ (opens in a new tab)
Collaboration and Support Platforms are the New Attack Surface ↗ (opens in a new tab)