219 Security Blogs

Last Updated: 29 Oct 26 17:21 UTC

Blog List | Github | OPML

2026-10-29

Include Security
Abliterated Models in Appsec Pentesting

Meta Security
Catching Bugs Before They Land: JiTTesting’s Human-on-the-Loop Approach at Full Scale

Microsoft Security
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

Microsoft Security
Tracking AI adoption in North Korean threat actor tradecraft

Dark Reading
Threat Modeling With 4 Simple Questions on a White Board

GitGuardian
GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality

Wiz
The Rise of Agentic Attacks: What They Look Like, and Where They're Headed

Malwarebytes
Malicious Firefox extensions impersonate popular crypto wallets

Talos Intelligence
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

Aikido
The day after tomorrow: After PHP2Shell, it gets worse, then defenders win

Bishop Fox Security
A Journey into Claude's Sandbox

Eclypsium
Eclypsium and NVIDIA Collaborate to Address Emerging AI Infrastructure Attack Surface and Strengthen AI Trust

Ars Technica Security
Massive leak exposes 41,000 DHS workers and undercover ICE agents

Eclypsium
Building Trusted AI Infrastructure

Cloudflare
Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants

Eclypsium
CNN: AI hardware can be hacked so chatbots provide dangerous answers, research shows

Eclypsium
Manipulating AI Models from the Hardware Up

MIT Technology Review
The Download: AI agent tracking and climate feedback loops

CISA Alerts & Advisories
Hitachi Energy CoreTec Product

CISA Alerts & Advisories
Siemens Mendix SAML Module

CISA Alerts & Advisories
Hitachi Energy TRO600 series products

Malwarebytes
Have an older iPhone or iPad? Apple has a security update for you

MIT Technology Review
We urgently need to monitor AI agents’ actions in real time

Dark Reading
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes

MIT Technology Review
Our climate models have a big, dangerous blind spot

Talos Intelligence
NIK C2: The new AI-enabled command-and-control framework

Eye Security Research
How attackers keep reading mail after M365 session revocation

Aikido
Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster

Dark Reading
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause

DarkRelay
How Weak WiFi Passwords Get Cracked (WPA2 Lab Demo)

ISC SANS
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)

ISC SANS
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)

Socket
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users

ISC SANS
Yet Another ClickFix Campaign, (Wed, Oct 28th)

Datadog HQ
Trace voice agents with Datadog Agent Observability

Datadog HQ
Datadog named a Leader in the Forrester Waveâ„Ē: AIOps Platforms, Q4 2026

Datadog HQ
Detect when your AI agent copies a self-replicating prompt injection


2026-10-28

Talos Intelligence
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

Mend
PHP2Shell is in CISA KEV: why runtime visibility matters

MIT Technology Review
Creating AI value with enterprise context

Black Hills Info Sec
John Strand's 11 Core Skills: For SOC Analysts

Dark Reading
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub

Silverfort
Weaponize your identity debt: Identity Security, decoys, and tripwires in the age of AI attacks

Meta Security
Meta Andromeda: Powering the Next Generation of Ads Retrieval Through Model-System Co-Design

Microsoft Security
The CISO’s evolving role: Protecting and defending in the agentic era

GitGuardian
Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First

Dark Reading
AI Takes Root in Hospital Corridors, Raises Security Stakes

Dark Reading
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

The Citizen Lab
Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk

Hybrid Analysis Blog
SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks

Malwarebytes
Banks are blocking AI agents from customer accounts

Step Security
GitHub Actions Native Egress Firewall vs. Harden-Runner: Five Differences That Matter

Rapid7
How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance

MIT Technology Review
The Download: dead startups fueling AI and interspecies communication

MIT Technology Review
Pairing industrial AI autonomy and human control

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Malwarebytes
Chrome and Firefox updates fix serious security flaws. Install them now

Schneier on Security
Studying Fraudulent North Korean IT Workers

Aikido
Aikido launches external network pentesting

HN Security
Putting Claude Code in a box: a sandboxed dev container for Zed

Dark Reading
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature

Snyk
PHP2Shell Won't Be the Last. Here's Where the Next One Will Show Up First.

ISC SANS
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)

Snyk
Snyk UNFILTERED: Inside Our First-Ever Customer Summit

Datadog HQ
Match monitoring depth to workload needs with Infrastructure Basic


2026-10-27

Amazon Security
Introducing Route 53 Resolved IP Validation for AWS Network Firewall

Eclypsium
Ars Technica: Code-execution flaw in UEFI firmware affects most servers on planet Earth

Dark Reading
3 Frameworks to Protect CISOs & Orgs Against AI Liability

Dark Reading
External Teams Chats Anchor 15-Minute Malware Delivery

Ars Technica Security
Code-execution flaw in UEFI firmware affects most servers on planet Earth

Dark Reading
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack

Praetorian
php2shell in Practice: Exploitable, Conditional, and Hard to Mass-Exploit

Amazon Security
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope

Dark Reading
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills

Socket
Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets

GitGuardian
GhostAction Crosses Paths With PolinRider: Inside the October Escalation

Amazon Security
Part 3 – Cybersecurity journeys: The work behind the work

Bad Security
We Asked AI to Replace Us. Now We're Terrified It Might Succeed.

The Citizen Lab
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’

Dark Reading
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants

Zero Day Initiative
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

Meta Security
PrivacyLib: Privacy Controls at the Data Access Boundary

ReversingLabs
Researchers Break Into Anthropic’s Systems in Just 12 Hours—Through Third-Party Software

Meta Security
Python Typing Survey 2026: AI Tools and the Shifting Checker Landscape

Sicuranext Blog
Two RCEs, one Wednesday: responsible disclosure has run out of time

Sicuranext Blog
Two RCEs, one Wednesday: responsible disclosure has run out of time

XBOW
PHP2shell: Patch Today, Then Prove It

Malwarebytes
Five election scams to watch out for

Step Security
StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines

PortSwigger
Scalable Vector Grief

JFrog
The Impact of AI on CVEs: Industry Challenges

Wiz
PHP2Shell: Exploitation Attempts and Remediation Trends

Bishop Fox Security
Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

Cloudflare
What took the Internet offline in Q3 2026

Cloudflare
Introducing the Cloudflare PHP Capture the Flag challenge

Malwarebytes
Artificial Intimacy: Love and lies in the age of AI 

Rapid7
Simplify User Access Management with SCIM on Rapid7 Command Platform

Malwarebytes
The web’s having a rough week. Here’s how to browse safely

MIT Technology Review
The Download: Anthropic’s IPO, smarter power grids, and exercise pills

CISA Blog
CISA Publishes Significant Updates to ScubaGear and ScubaGoggles

CISA Alerts & Advisories
EPICS Base

CISA Alerts & Advisories
Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

ToxSec
AI Didn’t Break Security. It Just Stopped Forgiving Bad Fundamentals.

MIT Technology Review
Industrial Intelligence: The next growth opportunity for manufacturing

Escape DAST
Escape research found an auth bypass in Ghost that can wipe all member's votes. It's now CVE-2026-103288.

Schneier on Security
Hiding Capabilities in AI Models

Malwarebytes
Samsung TVs without mics may listen through soundbars, researcher says

Talos Intelligence
From federal SOCs to Talos: Ryan Fetterman on practical security research

MIT Technology Review
How solid-state transformers could help power the AI boom

Troy Hunt
Weekly Update 527: Cybergeddon News v. Reality

TrustedSec
What is CUI? A Contractor’s Perspective

ISC SANS
ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)

ISC SANS
Apple Patches for October 2026, (Mon, Oct 26th)

Dark Reading
So Many AI Security Benchmarks, but None Tell the Whole Story

Semgrep
Broccoli2Shell: The One Decoder to Rule Them All

Semgrep
You Can Be Aware and Still Get Compromised. Readiness Limits the Damage.


2026-10-26

Doyensec
ElectroNG is now open source!

Aikido
How to patch PHP2Shell with free Aikido Images

Socket
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected

Cloudflare
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

Dark Reading
Risks & Rewards: How AI Is Redefining the CISO's Role

Socket
eMudhra, Brotli, and the Long Tail of a Security Fix

Dark Reading
In-the-Wild Attack Abuses AI Agents' Trust in Markdown

Varonis
Varonis' Takeaways from Forrester’s 2026 Email, Messaging, and Collaboration Security Solutions Landscape Report

Dark Reading
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

MIT Technology Review
Will the real Anthropic please stand up

Rapid7
CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

Meta Security
Meta Networking at the 2026 OCP Global Summit: Open Innovation for Scale-Up, Scale-Out, and Scale-Across AI Networks

GitGuardian
OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

Palo Alto Networks
Palo Alto Networks Named a Leader in the 2026 GartnerÂŪ Magic Quadrantâ„Ē for Privileged Access Management

Step Security
litellm 1.107.0 Compromised on PyPI and Docker: Credential Stealer and Hourly Remote Code Loader

Dark Reading
10 Software Security Practices Built for the Next 250 Years

Malwarebytes
Popcorn Time’s forgotten updater left millions of devices exposed to hijacking

Wiz
The Pwn Request Reckoning: What Still Works Against GitHub Actions

Malwarebytes
AI Halloween videos: Who’s getting your photos?

Escape DAST
Introducing Cascade 2 Iguazu: multi-agent AI pentesting you can audit

CISA News
CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Malwarebytes
Patient records exposed in Quest breach: What you need to know

Schneier on Security
Bias in Qwen3-Coder Model

ISC SANS
Looking for a Language [Guest Diary], (Wed, Oct 21st)

Xint
Stealing OpenAI Reasoning Traces via Compaction Smuggling

Malwarebytes
A week in security (October 19 – October 25)

DarkRelay
Web App Pentesting: Scope, Methodology, and OWASP Standards

Snyk
PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): [Updated for CVE-2026-115560]

ISC SANS
ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)

Datadog HQ
Monitor Oracle AI Database across clouds with Datadog

Sansec Threat Research
Notorious Brazilian Magecart group hijacks Convertr checkouts via outdated Plausible install

Datadog HQ
Best practices for scaling A/B testing with experiment protocols

Rosecurify
Seclog - #201

Hacktron
Node2Shell: Brotli Decoder RCE in Node.js (CVE-2026-111497)

Hacktron
php2shell: The exploitability gap between frontier and open models

Elastic Security Labs
Kernel eviction notice: What wesp.sys reveals about the Windows Endpoint Security Platform


2026-10-25

ISC SANS
YARA-X 1.22.0 Release, (Sun, Oct 25th)

Wiz
Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles

Wiz
Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability


2026-10-24

Aikido
Adding Aikido AI pentesting to your existing security stack

Step Security
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found

Sansec Threat Research
deepveindrilling.com: Magento CMS block loader hits 953 stores


2026-10-23

Socket
New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack

Schneier on Security
Friday Squid Blogging: Increasing Squid Populations

Dark Reading
Trust Is Not What It Seems — and Fraudsters Are Counting on It

Aikido
Node2Shell evolves to HTTP2Shell. Brotli flaw (CVE-2026-111497) blast radius affects many libraries & apps using HTTP.

ISC SANS
(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

Dark Reading
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

Cloudflare
Origin Range Requests: Serving large files without range-request tuning

Microsoft Security
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Cloudflare
Bringing post-quantum cryptography to geographically fenced key management

Dark Reading
AI Tools Are Generating Massive Attacks for Little Cost

Ars Technica Security
Knicks sent employees fake offer of championship rings in phishing test: Report

Palo Alto Networks
Palo Alto Networks Brings Continuous AI Defense and Prisma AIRS to the OpenAI Marketplace

The Citizen Lab
Built-In Weakness: Lawful Access and Encryption in the Age of AI-Powered Cyber Threats

Rapid7
Metasploit Wrap Up: Langflow, MongoDB, and More

NVISO Labs
PHP2Shell Operational Guidance

Socket
Cloudflare Introduces a Faster TypeScript Compiler Written in Rust

Dark Reading
Why Caribbean Threats Cascade Into Global Cyber-Risk

Dark Reading
Cyber Insurance's New Reality: Underwriting Isn't Enough

Varonis
Go With the Flow: How a Shadow Dependency Led to a Cross-Tenant Vulnerability in GCP Dataflow

Malwarebytes
Resident Evil maker Capcom warns of phishing after 11.7 million records exposed

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Dark Reading
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack

Schneier on Security
Compromised TLS Certificates

Moonlock
How to spot a Dropbox phishing email when everything looks real

Malwarebytes
Crime Stoppers chapter freezes tips after breach breaks anonymity promise

Escape DAST
Jev and the Future of AI Pentesting: Why the Harness Matters More Than Ever

DarkRelay
OWASP Top 10 Penetration Testing

Dark Reading
State Bank of India Suffers a Customer PII Data Leak

Moonlock
Why Trust Wallet scams keep working: Tactics, red flags, and defenses

Moonlock
ICMacOS evolves from a Mac stealer into a remote-access trojan

Okta Security
Okta and Auth0 are removing trust in the eMudhra emSign ECC Root CA – G3

Okta Security
Node2Shell: Node.js Brotli flaw (CVE-2026-111497)

Auth0
Auth0-Powered SaaS Providers Unlock Growth with the Okta Integration Network

Elastic Security Labs
How CVE-2026-73570 turns a Zimbra log file into remote code execution


2026-10-22

Wiz
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context

Dark Reading
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

Dark Reading
What We Missed: Feds Lasso Texas Laptop Farms

Ars Technica Security
Disgraced eMudhra drops out of TLS business after using cert private key of 4

Black Hills Info Sec
Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys

Step Security
eMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update

Varonis
PHP2Shell: One Upload, Full Server

Dark Reading
Les supermarchÃĐs de l'UE paient d'un firmware de rÃĐfrigÃĐrateur non mis à jour

Eclypsium
Memory Safety, AI security, Auth Challenges - BTS #84

Aikido
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)

Talos Intelligence
I had plans for that second

Github Security Blog
How bug bounty sharpens one researcher’s security skills