Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Fantastic unwind information and where to find them ↗ (opens in a new tab)
Hiding from the Panic Button: Singularity SysRq Hook ↗ (opens in a new tab)
Nullcon Goa HackIM 2026 CTF Write-up ↗ (opens in a new tab)
Sweet Dreams ↗ (opens in a new tab)
Schrödinger’s Cloud: Both Safe and Compromised ↗ (opens in a new tab)
Evolving the Threat Hunter Playbook 🏹: Planning Hunts with Agent Skills 🤖 ↗ (opens in a new tab)
Cyber Security Awareness 2026: Stay Safe Online ↗ (opens in a new tab)
What Is Log Management and Why you Need it ↗ (opens in a new tab)
Reverse engineering Realtek RTL8761B* Bluetooth chips, to make better Bluetooth security tools & classes ↗ (opens in a new tab)
AuxClickjacking ↗ (opens in a new tab)
Gunshers Ltd PayPal Scam: The $942 Receipt Hiding a Fake Refund Helpline ↗ (opens in a new tab)
Efficient (Functional) Bootstrapping for CKKS over the Conjugate-Invariant Ring ↗ (opens in a new tab)
Trimble Cityworks Remote Code Execution Attack ↗ (opens in a new tab)
Anthropic reveals Mythos 5 tried submitting malicious code to an open-source project ↗ (opens in a new tab)
Quest Diagnostics pauses lab portal after breach ↗ (opens in a new tab)
How to Export Microsoft Entra ID Sign-in Logs ↗ (opens in a new tab)
FBI Warns of Phishing Attacks Ahead of the US Midterm Elections ↗ (opens in a new tab)
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal ↗ (opens in a new tab)
Crime Stoppers chapter freezes tips after breach breaks anonymity promise ↗ (opens in a new tab)
The Next Cybersecurity Frontier Is Better Collaboration, Not Better Detection ↗ (opens in a new tab)
Secure Data Transfer with XML Schema Validation ↗ (opens in a new tab)
2026-10-09: Pcap of infection from Macfinger Clickfix activity ↗ (opens in a new tab)
Ransomware Victimology: Redefining the High-Risk User ↗ (opens in a new tab)
Preparing for 2027: Five Trends Shaping Enterprise Threat Intelligence ↗ (opens in a new tab)
The Current Landscape of OAuth Attacks ↗ (opens in a new tab)
When DNS Trust Breaks: What the Counterfeit Google Certificates Reveal ↗ (opens in a new tab)
Huntress Expands Ingram Micro Partnership Across Canada and Latin America ↗ (opens in a new tab)
M365 Token Spray and Replay Campaign Compromises Business Email Accounts ↗ (opens in a new tab)
Node2Shell: From Brotli Data to Remote Code Execution ↗ (opens in a new tab)
Who Checked It? Attestations, Gemara, and CRA Due Diligence ↗ (opens in a new tab)