Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
5 tips how banks can increase mobile banking security ↗ (opens in a new tab)
DAST without disruption: Burp Suite DAST winter update 2025 ↗ (opens in a new tab)
Android expands pilot for in-call scam protection for financial apps ↗ (opens in a new tab)
Canada Immigration Bureau Scam Calls: The Fake IRCC Deportation Fee Trap ↗ (opens in a new tab)
Strongly Adaptive Linear-Communication ABA with Almost-Everywhere Termination ↗ (opens in a new tab)
How Huntress Detects and Responds to a ClickFix Attack ↗ (opens in a new tab)
Crypto Scam Extensions Masquerade as High-Profile Investors ↗ (opens in a new tab)
Beware of Phishing Emails That Disguise Themselves as Project Material Purchase Requests ↗ (opens in a new tab)
Advanced Cross-Attack Backdoor Detector Based on Disturbance Immunity Learned From Classic Backdoor Attacks ↗ (opens in a new tab)
Bulletin d'actualité CERTFR-2026-ACT-036 (24 août 2026) ↗ (opens in a new tab)
Building Scalable Bridges Between Systems Using The Latest Release of Our Ciaops Library ↗ (opens in a new tab)
Holding blobs for ransom: Four methods for Azure Storage ransomware ↗ (opens in a new tab)
Beware 6 Types of Cyberattacks To Preserve Your Company’s Reliability ↗ (opens in a new tab)
The Fragile Lock: Novel Bypasses For SAML Authentication ↗ (opens in a new tab)
Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing ↗ (opens in a new tab)
Marketplace Cash Envelope Swap Scam: Counted Money Can Still Go Missing ↗ (opens in a new tab)
The Exact Bit Security of Hash-Based Signatures ↗ (opens in a new tab)
The First 24 Hours: What Happens When Ransomware Lands ↗ (opens in a new tab)
Weekly Update 523: Live From a Norwegian Fjord ↗ (opens in a new tab)
Vec2Null: Structured Identity Vectorization and Nulling for One-Shot Face Unlearning ↗ (opens in a new tab)
Bulletin d'actualité CERTFR-2026-ACT-035 (17 août 2026) ↗ (opens in a new tab)
One Adversary: The Moment Nobody Sees ↗ (opens in a new tab)
Entra Agent ID: The blueprint blast radius ↗ (opens in a new tab)
How to detect React2Shell with Burp Suite ↗ (opens in a new tab)
Rust in Android: move fast and fix things ↗ (opens in a new tab)
Claim Espresso ESP Scam Exposed: Fake Token Portals and Wallet Access Risks ↗ (opens in a new tab)
Faster Polynomial Factorization over Finite Fields via Batched Modular Composition ↗ (opens in a new tab)
What Would RAG Look Like If Miranda Priestly Were the User? ↗ (opens in a new tab)
HypSCA: A Hyperbolic Embedding Method for Enhanced Side-Channel Attack ↗ (opens in a new tab)
Bulletin d'actualité CERTFR-2026-ACT-035 (17 août 2026) ↗ (opens in a new tab)