Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Introducing Cyber Threat Exposure Bundle: A Unified Approach to External Risk ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-03-17 · First collected 2026-10-24

• Active Reconnaissance Campaign Targets SonicWall Firewalls Through Commercial Proxy Infrastructure ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-02-27 · First collected 2026-10-24

• Top 10 web hacking techniques of 2025 ↗ (opens in a new tab)

  PortSwigger Research · Published 2026-02-05 · First collected 2026-10-24

• New Android Theft Protection Feature Updates: Smarter, Stronger ↗ (opens in a new tab)

  Google Online Security Blog · Published 2026-01-27 · First collected 2026-10-24

• ASP.NET MVC View Engine Search Patterns ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2025-11-17 · First collected 2026-10-24

• Connecticut Superior Court Scam: Fake Fines and Bogus Legal Help Explained ↗ (opens in a new tab)

  MalwareTips Blog · Published 2026-10-26 · First collected 2026-10-26

• Exact Error Bootstrapping and Comb Bootstrapping in FHEW/TFHE ↗ (opens in a new tab)

  IACR News · Published 2026-10-26 · First collected 2026-10-26

• Eiliko robot companion exposes private chats and can be hijacked ↗ (opens in a new tab)

  Malwarebytes · Published 2026-10-16 · First collected 2026-10-24

• Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs ↗ (opens in a new tab)

  Huntress Blog · Published 2026-10-07 · First collected 2026-10-24

• Weekly Update 524: Live From Copenhagen ↗ (opens in a new tab)

  Troy Hunt's Blog · Published 2026-10-04 · First collected 2026-10-24

• Beware of Malware infection in Facebook Ads Offering Cryptocurrency Rewards ↗ (opens in a new tab)

  ASEC · Published 2026-09-29 · First collected 2026-10-24

• Practical Federated Unlearning: A Target Client-Driven Approach to Model Forgetting ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-17 · First collected 2026-10-24

• Risky Bulletin: BGP hijack delivers malicious Virtualizor updates ↗ (opens in a new tab)

  Risky Bulletin · Published 2026-09-02 · First collected 2026-10-24

• Bulletin d'actualité CERTFR-2026-ACT-037 (31 août 2026) ↗ (opens in a new tab)

  CERT-FR news · Published 2026-08-31 · First collected 2026-10-24

• Announcing Chainguard container images for Go 1.27 ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-08-31 · First collected 2026-10-24

• Mexico’s Cybersecurity Plan 2025-2030: Turning Ambition Into Defense ↗ (opens in a new tab)

  Recorded Future – Main Feed · Published 2026-08-25 · First collected 2026-10-24

• Balonx Sistema: The Face Behind the PhaaS Affecting Mexican Banking ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-08-19 · First collected 2026-10-24

• Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility ↗ (opens in a new tab)

  WeLiveSecurity · Published 2026-08-13 · First collected 2026-10-24

• Cognition's Jeff Wang on demoting the IDE, with Richard Liu from Anthropic ↗ (opens in a new tab)

  Blog on 1Password Blog · Published 2026-08-13 · First collected 2026-10-24

• Bitwarden upholds high security standards with annual third-party audits ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-08-04 · First collected 2026-10-24

• Clustered Points of Failure ↗ (opens in a new tab)

  SpecterOps · Published 2026-07-29 · First collected 2026-10-24

• Weekly Threat Bulletin – July 1st, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-07-01 · First collected 2026-10-24

• Detecting the Klue supply chain attack in Salesforce instances ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-06-22 · First collected 2026-10-24

• Application Security Testing (AST): Essence, Value, Types and Tools ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-03-20 · First collected 2026-10-24

• Handala Threat Group ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-03-13 · First collected 2026-10-24

• 2026 GreyNoise State of the Edge Report: Where Attacks Concentrate and Defenses Fall Short ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-02-24 · First collected 2026-10-24

• Top 10 web hacking techniques of 2025: call for nominations ↗ (opens in a new tab)

  PortSwigger Research · Published 2026-01-06 · First collected 2026-10-24

• HTTPS certificate industry phasing out less secure domain validation methods ↗ (opens in a new tab)

  Google Online Security Blog · Published 2025-12-10 · First collected 2026-10-24

• Unicode surrogates conversion to (simplified) replacement characters ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2025-11-10 · First collected 2026-10-24

• Torkeen.com EXPOSED – Fake Store or Legit? What We Found ↗ (opens in a new tab)

  MalwareTips Blog · Published 2026-10-26 · First collected 2026-10-26