Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
The Confirmation Bias Trap: Why Being Right Doesn't Mean You're Correct ↗ (opens in a new tab)
Is Microsoft Defender for Office 365 Enough? What Native Protection Covers and What It Misses ↗ (opens in a new tab)
How Akamai’s ExAR Capabilities Contained a LATAM Supply Chain Attack ↗ (opens in a new tab)
RMM tools currently being distributed through phishing attacks (ScreenConnect, FleetDeck, Datto, SimpleHelp, JumpCloud, N-able) ↗ (opens in a new tab)
Unveiling the Backdoor’s Suppression Effect for Backdoor Defence ↗ (opens in a new tab)
Smashing Security podcast #484: How websites are tracking you with silence ↗ (opens in a new tab)
August 2026 CVE Landscape ↗ (opens in a new tab)
Bulletin d'actualité CERTFR-2026-ACT-038 (07 septembre 2026) ↗ (opens in a new tab)
Risky Bulletin: Russia tells data centers to deploy drone defenses ↗ (opens in a new tab)
What it took to reach 1 billion build manifests ↗ (opens in a new tab)
This month in security with Tony Anscombe – August 2026 edition ↗ (opens in a new tab)
Balonx Sistema: El Rostro Detrás del PhaaS que Impacta la Banca Mexicana ↗ (opens in a new tab)
No robots in the gym, with Keith Hoodlet ↗ (opens in a new tab)
Easily add a new account to Bitwarden using inline autofill ↗ (opens in a new tab)
Mythic 4 Public Beta: More Than a New Coat of Paint ↗ (opens in a new tab)
Adversarial Tales ↗ (opens in a new tab)
Introducing GuardDog 3.0: A new rules engine, transparent sandboxing, and more ↗ (opens in a new tab)
Turning Geopolitical Tension into Actionable Intelligence ↗ (opens in a new tab)
Chasing Spyware with a SIEM Solution to Pull the Plug on an APT ↗ (opens in a new tab)
GreyNoise Intelligence Is Available Across the CrowdStrike Falcon Platform ↗ (opens in a new tab)
Keeping Google Play & Android app ecosystems safe in 2025 ↗ (opens in a new tab)
Top 10 web hacking techniques of 2025 ↗ (opens in a new tab)
Security Onion 2025 Year in Review ↗ (opens in a new tab)
Choosing a managed service provider (MSP) ↗ (opens in a new tab)
Challenge One - Strange XSS ↗ (opens in a new tab)
Bc.app EXPOSED – Casino or Deposit Trap? How It Works ↗ (opens in a new tab)
On the Subtleties of Non-Malleability in IVC: Notions, Attacks and Constructions from Falsifiable Assumptions ↗ (opens in a new tab)
“Spray and pray” job applications could make it harder for you to spot a scam ↗ (opens in a new tab)
CMMC Level 2 Non-Negotiable Requirements Explained | Huntress ↗ (opens in a new tab)
MetaDefender™ Storage Security 4.6.0: What’s New in Scan Routing, Visibility, and Storage Protection ↗ (opens in a new tab)