Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Beyond Passwords: How Attackers Abuse Device Code Authentication ↗ (opens in a new tab)

  Cofense Intelligence · Published 2026-10-20 · First collected 2026-10-24

• CrowdStrike Achieves NCSC CIR Enhanced Level Assurance ↗ (opens in a new tab)

  CrowdStrike Blog · Published 2026-10-20 · First collected 2026-10-24

• Handling Pre-Contract FCI and CUI ↗ (opens in a new tab)

  TrustedSec · Published 2026-10-20 · First collected 2026-10-24

• MbedTLS Security Audit ↗ (opens in a new tab)

  Quarkslab Blog · Published 2026-10-19 · First collected 2026-10-24

• Reinventing Endpoint Security with Cortex XDR One ↗ (opens in a new tab)

  Palo Alto Networks Blog · Published 2026-10-19 · First collected 2026-10-24

• Bulletin d'actualité CERTFR-2026-ACT-044 (19 octobre 2026) ↗ (opens in a new tab)

  CERT-FR news · Published 2026-10-19 · First collected 2026-10-24

• Putting models to the secure coding test: Security rules ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-10-19 · First collected 2026-10-24

• ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant ↗ (opens in a new tab)

  SpecterOps · Published 2026-10-17 · First collected 2026-10-24

• Leveraging GenAI for Simplifying Zero Trust and Accelerating Threat Defense in VMware vDefend ↗ (opens in a new tab)

  VMware Security Blog · Published 2026-10-16 · First collected 2026-10-24

• Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown ↗ (opens in a new tab)

  From the Frog's mouth - JFrog Blog · Published 2026-10-16 · First collected 2026-10-24

• Managing open-weight model risk in enterprise deployments ↗ (opens in a new tab)

  Microsoft Security Blog · Published 2026-10-16 · First collected 2026-10-24

• Outpost24 Brings Self-Service Simplicity to PCI ASV Scanning ↗ (opens in a new tab)

  Outpost24 · Published 2026-10-16 · First collected 2026-10-24

• The Lawful Access Act’s threats to Canada’s national security ↗ (opens in a new tab)

  The Citizen Lab · Published 2026-10-16 · First collected 2026-10-24

• How to Build Your Actual Network Map with Custom Agents in Orca ↗ (opens in a new tab)

  Orca Security Blog · Published 2026-10-16 · First collected 2026-10-24

• Cyber Resilience Act for Mobile Apps: What Changes Now ↗ (opens in a new tab)

  Appknox Blog · Published 2026-10-16 · First collected 2026-10-24

• TAG-217 Targets South Korean Financial Services with ARTEX ↗ (opens in a new tab)

  Recorded Future – Main Feed · Published 2026-10-16 · First collected 2026-10-24

• What 200 Security Leaders Told Us About Network Device Security ↗ (opens in a new tab)

  Eclypsium | Supply Chain Security for the Modern Enterprise · Published 2026-10-15 · First collected 2026-10-24

• Japan’s Cyber Emergency Is a Warning for the World ↗ (opens in a new tab)

  Aqua · Published 2026-10-15 · First collected 2026-10-24

• Post-quantum updates to our TLS guidance ↗ (opens in a new tab)

  UK NCSC blogs · Published 2026-10-15 · First collected 2026-10-24

• Burp AT: What's new since Black Hat ↗ (opens in a new tab)

  PortSwigger Blog · Published 2026-10-15 · First collected 2026-10-24

• Poisoned Vector: JADEPUFFER and Using Unauthenticated Chroma Databases for Retrieval Extortion | UpGuard ↗ (opens in a new tab)

  UpGuard – Breaches · Published 2026-10-15 · First collected 2026-10-24

• The Threat Hunting Flywheel: Why Threat Hunting Isn’t About Finding Bad Things ↗ (opens in a new tab)

  Black Hills Information Security, Inc. · Published 2026-10-14 · First collected 2026-10-24

• Weekly Threat Bulletin – October 14th, 2026 ↗ (opens in a new tab)

  F5 Labs All · Published 2026-10-14 · First collected 2026-10-24

• Frostbitten in France: A Danfoss StoreView Internet Exposure Report ↗ (opens in a new tab)

  Censys · Published 2026-10-14 · First collected 2026-10-24

• 500 Internal Server Error: What It Means and How to Fix It ↗ (opens in a new tab)

  Sucuri Blog · Published 2026-10-14 · First collected 2026-10-24

• Cryptography Rarely Fails Because of the Math ↗ (opens in a new tab)

  Cisco Security Blog · Published 2026-10-14 · First collected 2026-10-24

• Silently Install VSCode Extensions ↗ (opens in a new tab)

  pepe berba · Published 2026-10-14 · First collected 2026-10-24

• Introducing Chainguard Workspaces ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-10-14 · First collected 2026-10-24

• Ivanti Connect Secure CVE-2026-104935: Find impacted appliances ↗ (opens in a new tab)

  runZero Blog · Published 2026-10-13 · First collected 2026-10-24

• Developing Gemini 4 Argon responsibly and safely ↗ (opens in a new tab)

  Safety & Security · Published 2026-10-13 · First collected 2026-10-24