Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Chrome Adds Suspicious Site Warnings and ClickFix Protection ↗ (opens in a new tab)

  Security Archives - TechRepublic · Published 2026-10-22 · First collected 2026-10-24

• Srsly Risky Biz: OpenAI's Kazoo-Grade Spying Incident ↗ (opens in a new tab)

  Risky Bulletin · Published 2026-10-22 · First collected 2026-10-24

• ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd) ↗ (opens in a new tab)

  SANS Internet Storm Center · Published 2026-10-22 · First collected 2026-10-24

• Introducing 1Password for Agents ↗ (opens in a new tab)

  Blog on 1Password Blog · Published 2026-10-22 · First collected 2026-10-24

• Okta's Response to PHP2Shell ↗ (opens in a new tab)

  Okta Security RSS Feed · Published 2026-10-22 · First collected 2026-10-24

• Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside ↗ (opens in a new tab)

  GRAHAM CLULEY · Published 2026-10-21 · First collected 2026-10-24

• Compromised eMudhra intermediate certificates ↗ (opens in a new tab)

  Cisco Talos Blog · Published 2026-10-21 · First collected 2026-10-24

• OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks ↗ (opens in a new tab)

  OffSec RSS Feed · Published 2026-10-21 · First collected 2026-10-24

• The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass ↗ (opens in a new tab)

  Sonatype Blog · Published 2026-10-21 · First collected 2026-10-24

• Yocto Blacksail released, Bootlin contributions inside ↗ (opens in a new tab)

  Bootlin · Published 2026-10-21 · First collected 2026-10-24

• Introducing full transaction detection for Cloudflare WAF ↗ (opens in a new tab)

  Cloudflare – Security Tag · Published 2026-10-21 · First collected 2026-10-24

• Measuring Credential Exposure of Contractors and Integrators After the Refrigeration System Attack in France: 601 Industrial Remote Access Addresses Recovered From Stealer Logs, 73% on the Largest Platform Paired With Device Credentials ↗ (opens in a new tab)

  Blog Archives - Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime · Published 2026-10-21 · First collected 2026-10-24

• Your New MTTR Shortcut — Introducing Related Threat Context: Cut Time-to-Triage with Actionable IOC Context ↗ (opens in a new tab)

  ANY.RUN Cybersecurity Blog · Published 2026-10-21 · First collected 2026-10-24

• Stray Cat, Open Doors: How k0t Wanders Through the Network Edge ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-10-21 · First collected 2026-10-24

• vlt 1.5.0 Adds Agent Skills Management ↗ (opens in a new tab)

  Socket · Published 2026-10-21 · First collected 2026-10-24

• Web App Owners – You’re on Notice. Your Low-Hanging Fruit Just Got Lower ↗ (opens in a new tab)

  Sophos Blogs · Published 2026-10-21 · First collected 2026-10-24

• See vault health directly in the browser extension ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-10-21 · First collected 2026-10-24

• The Star Labs StarBook Horizon is Qubes certified! ↗ (opens in a new tab)

  Qubes OS · Published 2026-10-21 · First collected 2026-10-24

• SVD-2026-1011: Security Hardening in Splunk SOAR - October 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-10-21 · First collected 2026-10-24

• Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native. ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-10-20 · First collected 2026-10-24

• Protecting Chrome and Android Users from Compromised eMudhra Intermediate CA Certificates ↗ (opens in a new tab)

  Google Security · Published 2026-10-20 · First collected 2026-10-24

• Managing identity source transition for AWS IAM Identity Center ↗ (opens in a new tab)

  AWS Security Blog · Published 2026-10-20 · First collected 2026-10-24

• Ransom & Dark Web Issues Week 4, October 2026 ↗ (opens in a new tab)

  ASEC · Published 2026-10-20 · First collected 2026-10-24

• Why the Tools You Already Own Won’t Make You PQC-Ready ↗ (opens in a new tab)

  ReversingLabs Blog · Published 2026-10-20 · First collected 2026-10-24

• How to keep your architecture intact when agents write the code ↗ (opens in a new tab)

  Sonar Blog · Published 2026-10-20 · First collected 2026-10-24

• Japan Data Breaches 2026: Inside the October Surge ↗ (opens in a new tab)

  SOCRadar® Cyber Intelligence Inc. · Published 2026-10-20 · First collected 2026-10-24

• Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries ↗ (opens in a new tab)

  Broadcom – Symantec Blogs · Published 2026-10-20 · First collected 2026-10-24

• Is the ad a scam? How to tell before you click ↗ (opens in a new tab)

  WeLiveSecurity · Published 2026-10-20 · First collected 2026-10-24

• Verborgene Tastenanschläge: Forensische Analyse eines Digispark HID-Geräts ↗ (opens in a new tab)

  NVISO Labs · Published 2026-10-20 · First collected 2026-10-24

• The journey of a paper unicorn: adventures inside a modern warehouse ↗ (opens in a new tab)

  Kaspersky Securelist · Published 2026-10-20 · First collected 2026-10-24