Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
VeilDNS: Post-Quantum DNS Privacy from the First UDP Packet ↗ (opens in a new tab)
“Spray and pray” job applications could make it harder for you to spot a scam ↗ (opens in a new tab)
SMB1001: How Huntress Maps to Each Tier ↗ (opens in a new tab)
When Productivity Extensions Become Attack Platforms ↗ (opens in a new tab)
Beware of SMS messages claiming to protect your Pi Coin account—phishing sites are stealing wallets ↗ (opens in a new tab)
UFOs: An Ultra-Fast Toolkit for Multiparty Computation on Small Elements ↗ (opens in a new tab)
Bulletin d'actualité CERTFR-2026-ACT-037 (31 août 2026) ↗ (opens in a new tab)
One Adversary: The Fifteen-Minute Problem ↗ (opens in a new tab)
This month in security with Tony Anscombe – July 2026 edition ↗ (opens in a new tab)
Introducing Attack Path Management for Entra Agents in BloodHound Enterprise ↗ (opens in a new tab)
Beyond passwords: a complete approach to enterprise credential management ↗ (opens in a new tab)
Weekly Threat Bulletin – June 24th, 2026 ↗ (opens in a new tab)
Entra Agent ID: Inside a cross-tenant agent compromise ↗ (opens in a new tab)
3 Levels of Corporate Network Security ↗ (opens in a new tab)
New in Event Feeds: Vendor CVE Spike & Tag Spike ↗ (opens in a new tab)
Burp On Tour 2025: bringing the AppSec community together around the world ↗ (opens in a new tab)
Further Hardening Android GPUs ↗ (opens in a new tab)
Bypassing CSP with New Relic Custom Events ↗ (opens in a new tab)
Smilehealthyshop.com EXPOSED – Real Store or Scam? Investigation ↗ (opens in a new tab)
Extraction meets Distillation - cryptanalytic techniques to recover parameters from a Deep Neural Network ↗ (opens in a new tab)
OpenAI sued over children safety and data use ↗ (opens in a new tab)
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack ↗ (opens in a new tab)
August 2026 Threat Trend Report on APT Attacks (South Korea) ↗ (opens in a new tab)
Scaling with Purpose: Akamai’s Pursuit of ISO 50001 for Energy Management ↗ (opens in a new tab)
Tramy: A Multi-Client Dynamic Searchable Symmetric Encryption With Malicious Servers Tracking for Conjunctive Queries ↗ (opens in a new tab)
Bulletin d'actualité CERTFR-2026-ACT-036 (24 août 2026) ↗ (opens in a new tab)
Gone with the WindRelay: A New Malware Combo Behind a Growing Fraud Scheme ↗ (opens in a new tab)
Attack Path Management Comes to AWS ↗ (opens in a new tab)
Weekly Threat Bulletin – June 17th, 2026 ↗ (opens in a new tab)
Mapping out your unknown: A threat hunter’s guide to Salesforce ↗ (opens in a new tab)