Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• EncryptedSharedPreferences is Dead: Here’s What You Should Use Instead ↗ (opens in a new tab)

  Include Security Research Blog · Published 2026-08-31 · First collected 2026-10-24

• I pointed an agent at a bootloader. It found bugs but not useful ones ↗ (opens in a new tab)

  Low-level adventures · Published 2026-08-26 · First collected 2026-10-24

• Rust Supply Chain Attack 2026 ↗ (opens in a new tab)

  Conviso AppSec · Published 2026-08-24 · First collected 2026-10-24

• Playing whack-a-mole is losing ↗ (opens in a new tab)

  Closure on David Adrian · Published 2026-08-23 · First collected 2026-10-24

• Intelligence Insights: August 2026 ↗ (opens in a new tab)

  Red Canary · Published 2026-08-20 · First collected 2026-10-24

• PokéWalker hacking ↗ (opens in a new tab)

  Dmitry.GR · Published 2026-08-17 · First collected 2026-10-24

• Supply Chain Security Analysis of a 9.5M-Install VS Code Extension ↗ (opens in a new tab)

  ProjectDiscovery Blog · Published 2026-08-16 · First collected 2026-10-24

• Connecting to ShadowNode with MeshChatX ↗ (opens in a new tab)

  Lets Hack It · Published 2026-08-08 · First collected 2026-10-24

• Prompt Engineering for Security Agents - A Measurable Approach with GEPA ↗ (opens in a new tab)

  XPN Infosec Blog · Published 2026-07-29 · First collected 2026-10-24

• Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-07-29 · First collected 2026-10-24

• CISSP Cram Session 2026 ↗ (opens in a new tab)

  Eric Conrad · Published 2026-07-28 · First collected 2026-10-24

• Introducing the abuse.ch Community Hub: recognition matters ↗ (opens in a new tab)

  abuse.ch | IT-Security Blog · Published 2026-07-28 · First collected 2026-10-24

• Agentless Linux EDR: Stopping Volt and Salt Typhoon in OT Environments ↗ (opens in a new tab)

  Sandfly Security Blog RSS Feed · Published 2026-07-23 · First collected 2026-10-24

• FreeBSD Released the Most Security Advisories in Project History in June 2026 ↗ (opens in a new tab)

  TaoSecurity Blog · Published 2026-07-17 · First collected 2026-10-24

• Why AIX Systems Need EDR Beyond Perimeter Security ↗ (opens in a new tab)

  Uptycs Blog · Published 2026-07-15 · First collected 2026-10-24

• The Zen of Bluetooth Security (ZOBS) ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-07-15 · First collected 2026-10-24

• XSRFProbe v3.0 — A Ground-Up Rewrite ↗ (opens in a new tab)

  0xInfection's Blog — Ramblings of an Infected Geek · Published 2026-07-11 · First collected 2026-10-24

• OWASP Top Ten Most Critical Web Application Risks ↗ (opens in a new tab)

  Acunetix Blog · Published 2026-06-25 · First collected 2026-10-24

• Harnessing the Power of Cobalt Strike Profiles for EDR Evasion – Part 3 ↗ (opens in a new tab)

  White Knight Labs · Published 2026-06-15 · First collected 2026-10-24

• setresuid(⚡): Glitching Google's TV Streamer from adb to root ↗ (opens in a new tab)

  Raelize - Embedded Device Security Testing, Consultancy & Training · Published 2026-05-17 · First collected 2026-10-24

• The Mythos Effect: Why Exposure Intelligence Matters More Than Ever ↗ (opens in a new tab)

  RedHunt Labs · Published 2026-05-14 · First collected 2026-10-24

• Removing the Modem and GPS from my 2024 RAV4 Hybrid ↗ (opens in a new tab)

  Arkadiy Tetelman · Source updated 2026-05-13 · First collected 2026-10-24

• Function-Level Fuzzing for RTOS Kernels with RTCon ↗ (opens in a new tab)

  Hacking Lab · Published 2026-05-01 · First collected 2026-10-24

• CVE-2025-0918: TP-Link HTTP POST body DoS ↗ (opens in a new tab)

  Taszk Labs on taszk.io labs · Published 2026-04-28 · First collected 2026-10-24

• The Audit Room Has Two Stories And Neither Is the Full Truth ↗ (opens in a new tab)

  Dark Roast Security - Medium · Published 2026-04-25 · First collected 2026-10-24

• JitterDropper ↗ (opens in a new tab)

  OALABS Research · Published 2026-04-13 · First collected 2026-10-24

• Hijacking iOS Deep Links in a Health App Using Custom URL Schemes ↗ (opens in a new tab)

  All Things Security · Published 2026-04-09 · First collected 2026-10-24

• Creating a Fuji/WinFE external drive ↗ (opens in a new tab)

  MALoney (It's in the name) · Published 2026-04-09 · First collected 2026-10-24

• Applied Reverse Engineering: Crude T&E for Control-Flow Tracing ↗ (opens in a new tab)

  Reverse Engineering · Published 2026-04-03 · First collected 2026-10-24

• Breaking the console: a brief history of video game security ↗ (opens in a new tab)

  sergioprado.blog · Published 2026-04-02 · First collected 2026-10-24