Risk Discovery

Phil Venables

The Daily Swig

Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research

How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years

From capable AI models to trusted security testing

Introducing Burp AT: agentic AI, built on two decades of Burp Suite

Burp's new Ambassadors: learn from the people who use Burp Suite everyday

Heading to Vegas? Meet PortSwigger at Black Hat, BSides, and DEF CON 34.

Burp Extensibility 2026: Awards, Talks, and Highlights

The beast needs a cage: What's next for AppSec post-Mythos

3 ways custom scan checks turn practitioner knowledge into scalable automation

PortSwigger recognized at the Northern Tech Awards 2026.

AWS Security Blog

AWS Continuum sets a new standard in autonomous code security

AWS European Sovereign Cloud: Demonstrating an independent operation

ICYMI: August 2026 @AWS Security

Supporting ASD’s multi-factor authentication campaign: Why MFA matters more than ever

Transforming Bedrock Guardrails events into OCSF with CloudWatch

Run open weight models on Amazon Bedrock in AWS European Sovereign Cloud

Architecting a secure landing zone in the AWS European Sovereign Cloud

AWS STS simplifies session token size limits and adds session token size monitoring

Architecting resilient authentication with Amazon Cognito multi-Region replication

Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline

Darknet - The Darkside

Response Overview and Colonel Clustered – Grouping Burp Responses by Content

http-terminator – AI-Assisted HTTP Request-Smuggling Discovery

Hash Identifier Tools – Command-Line Password Hash Identification

whitelist-bypass – WebRTC Tunnels Through Video-Calling Platforms

WRAITH – Browser Hooking and Blind XSS Page Mirroring

Praetorian – Offensive Security Tools Built Around Portable Go Workflows

AI IR Overlay – Incident Response Specification for AI Agents

MSSQLand – Lightweight MS-SQL Interaction Tool for Lateral Movement and Post-Exploitation

Credential Stuffing in 2025 – How Combolists, Infostealers and Account Takeover Became an Industry

DumpBrowserSecrets – Browser Credential Harvesting with App-Bound Encryption Bypass

Least Privilege

Fox-IT Blog

RemotePE: The Lazarus RAT that lives in memory

Decrypting Full Disk Encryption with Dissect

Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation

Sifting through the spines: identifying (potential) Cactus ransomware victims

From Backup to Backdoor: Exploitation of CVE-2022-36537 in R1Soft Server Backup Manager

CVE-2022-27510, CVE-2022-27518 – Measuring Citrix ADC & Gateway version adoption on the Internet

Encryption Does Not Equal Invisibility – Detecting Anomalous TLS Certificates with the Half-Space-Trees Algorithm

SnapMC skips ransomware, steals data

StreamDivert: Relaying (specific) network connections

WastedLocker: A New Ransomware Variant Developed By The Evil Corp Group

Positive Technologies

PHDays 10 IDS Bypass contest: writeup and solutions

APT31 new dropper. Target destinations: Mongolia, Russia, the U.S., and elsewhere

How to detect a cyberattack and prevent money theft

Troy Hunt

Weekly Update 524: Live From Copenhagen

Weekly Update 523: Live From a Norwegian Fjord

Weekly Update 522: Live From Oslo with Scott Helme

Weekly Update 521: Breach Perception v. Reality

Weekly Update 520: The Unscripted Edition

Weekly Update 519: Breaches & Data Integrity

A Cautionary Tale About Data Breach Claims, Verification and Carhartt

Weekly Update 518: IoT Doorlock Nirvana with UniFi

Welcoming the Sri Lankan Government to Have I Been Pwned

Weekly Update 517: Cyber Ransoms

The Hacker Factor Blog

Validation Workflows

SEAL Tested, Hardened, and Honest

Finishing Touches

The Most Important Lesson

C2PA and Pixel Glitter Milk

The Security Skeptic

CyberSecPolitics

Mythical Beasts

A quick research overview of the Research Handbook on Cyberwarfare

Automated LLM Bugfinders

What Open Source projects are unmaintained and should you target for takeover ?

The Open Source Problem

Jia Tan and SocialCyber

The Atlantic Council Paper and Defending Forward

FORECASTING

Guest Post: HostileSpectrum’s futures: Looking back on 2021’s estimative signposts

Pride Month

Schneier on Security

Another Historic Cipher Falls to AI

Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing

Unidentified Flock Cameras in Florida

How American Political Campaigns Are Using AI—and What They’re Spending on the Tools

Connected Cars Are a Surveillance Platform

I Want Better Reporting on AI Genie Behavior

Using Device Linking to Eavesdrop on WhatsApp and Signal

New Attack Against RSA

Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee

On Anthropic’s AI Misuse Report

SANS Inernet Storm Center

ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)

TTY Logs and the Data it Captures, (Sun, Oct 4th)

User Agent Strings Curiosities, (Sun, Oct 4th)

YARA-X 1.21.0 Release, (Sat, Oct 3rd)

ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)

ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)

ISC Stormcast For Thursday, October 1st, 2026 https://isc.sans.edu/podcastdetail/10118, (Thu, Oct 1st)

ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)

Scans for Wordfence Protected Websites, (Tue, Sep 29th)

ISC Stormcast For Tuesday, September 29th, 2026 https://isc.sans.edu/podcastdetail/10114, (Tue, Sep 29th)

Red Hat Security

What enterprises need to know about the Cyber Resilience Act and software supply chain risk

What enterprises need to know about the software they depend on

Securing AI agents requires securing the systems around them

Red Hat Enterprise Linux 10 STIG automation now matches DISA STIG V1R2

2026 update: The road to quantum-safe cryptography in Red Hat OpenShift

Turning security complexity into useful intelligence: What’s new in Red Hat Lightspeed

Stop rewriting stable code: How Lightwell protects your bottom line and developer velocity

Closing the loop: From network policy intent to verified reality

Accelerating post-quantum security migration with Red Hat Certificate System

The Lightwell reality check

Pentest Partners

Pedro Felix's Shared Memory

Reactive streams: a play in multiple acts

RFC 8252 and OAuth 2.0 for Native Apps

Accessing the HTTP Context on ASP.NET Core

Should I PUT or should I POST? (Darling you gotta let me know)

Health check APIs, 500 status codes and media types

On contracts and HTTP APIs

Focus on the representation semantics, leave the transfer semantics to HTTP

Client-side development on OS X using Windows hosted HTTP Web APIs

Using multiple IIS server certificates on Windows 7

The OpenID Connect Cast of Characters

Google Online Security Blog

AI threats in the wild: The current state of prompt injections on the web

Bringing Rust to the Pixel Baseband

Protecting Cookies with Device Bound Session Credentials

Google Workspace’s continuous approach to mitigating indirect prompt injections

VRP 2025 Year in Review

Security for the Quantum Era: Implementing Post-Quantum Cryptography in Android

Cultivating a robust and efficient quantum-safe HTTPS

Staying One Step Ahead: Strengthening Android’s Lead in Scam Protection

Keeping Google Play & Android app ecosystems safe in 2025

New Android Theft Protection Feature Updates: Smarter, Stronger

Netlabs.360.com

银狐云端“生死簿”：从“无条件返回”到“黑名单”机制

MS Cyber Security

Insights from the 2026 Microsoft Digital Defense Report

Preparing governments for an era of interconnected cyber risk

Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

Phishing Abuses RMM Tools for Persistent Access

Beyond source code: A path to the keys to the kingdom

Star Blizzard refines phishing and malware delivery with the RedFlick technique

NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

The Last Watchdog

SHARED INTEL Q&A: AI finds flaws faster — defenders still need to fix what attackers exploit

News alert: Archipelo launches Salmon to create verifiable audit trails for AI agent activity

Guest Essay: Before AI agents takes hold, define who can challenge them and who owns the outcome

News alert: SCOUTz gives MSPs security evidence to help turn prospects into customers

Black Hat Fireside Chat: As AI agents spread, the network shifts from traffic mover to policy enforcer

BLACK HAT FIRESIDE CHAT: Nobody picked the web browser to run work — now pick a boundary

MY TAKE: AI agents show uncanny initiative nobody designed — and carry no values at all

News alert: Axoflow introduces AxoDetect to identify threats and reduce security data costs

MY TAKE: OpenAI, Anthropic admit they can’t control AI — for now, the machines are running free

News Alert: SpyCloud survey finds machine identity risks outpace defenses, exposing gaps in oversight

The Security Catalyst

Cloud Security Alliance

Post Quantum Cryptography is Not an Algorithm Upgrade

5 Ways AI is Changing Traditional Security Models According to Modern CISOs

Cloud Security Doesn’t Have an Asset Problem. It Has a Relationship Problem.

CSA Welcomes NVIDIA Open Agent Safety Platform

From Models to MCP Servers, Skills, and Plugins: Rethinking Trust in the AI Supply Chain

Reachability is Only Half the Blast Radius

Gold Eagle: A New Operating Model for Vulnerability Coordination

The Vital Trifecta

Cloud Security Alliance Names Troy Leach as Executive Director of the CSAI Foundation

When Visibility Becomes Noise: How MDR Filters What Matters

Krebs on Security

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

Data Broker Radaris Loses Domains in Privacy Fight

Microsoft Plugs Nearly 1,000 Security Holes

FBI Probes Service Selling 153M+ Drivers Licenses

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Who’s Tracking You? Use This New Service to Find Out

Microsoft Plugs Nearly 400 Security Holes

Canadian Man Pleads Guilty in Snowflake Extortions

Read This Before You Buy That TV Streaming Stick

tl;dr sec

[tl;dr sec] #348 - Google's PageBreak Scanner, Perplexity's Agent Security Tool, Defending Agentically

[tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026

[tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards

[tl;dr sec] #345 - Bug Rumors → Exploits, Version Control DFIR, Agentic Worms

[tl;dr sec] #344 - VMs won't contain Cyber-capable Agents, AWS AI Security Analyst, Decompilers vs LLMs

[tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10

[tl;dr sec] #342 - Figma's Agentic Detection, Agent Identity, Uber's Agent-(E)DR

[tl;dr sec] #341 - Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements

[tl;dr sec] #340 - Anthropic and Meta Agents be Hackin', Agentic Incident Response Notebooks, Figma's AI Code Scanning

[tl;dr sec] #339 - Hugging Face's Incident Report, Context Bombs, AI does Cryptanalysis

Project Zero

Mozilla Security

Updated GPG key for signing Firefox and Thunderbird Releases

Improving Transparency and Assurance in the Web PKI: Mozilla Root Store Policy v3.1

Firefox Security Response to pwn2own 2025

Updated GPG key for signing Firefox Releases

Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0

Behind the Scenes: Fixing an In-the-Wild Firefox Exploit

Firefox will upgrade more Mixed Content in Version 127

Rapidly Leveling up Firefox Security

Mozilla VPN Security Audit 2023

Version 2.9 of the Mozilla Root Store Policy

CyberWatch

Atlantic Security Conference 2026

I Did A Thing! Proud to be a Contributing Author

Comparing Chinese APTs in Software Supply Chain Attacks

Daily Perk 3/30/2021 Updated

“Broken Trust”: The New Report from the Atlantic Council chronicles supply chain attacks

Daily Perk 3/29/2021

Zero Day

How I made a paid Mac app in 11 days with Claude – without writing a single line of code

iPhone 18 Pro Max can’t call or text on AT&T? Apple will replace it for free

This new ChatGPT scam tricks you into installing malware – how to spot the trap

Google Wallet not working on your Pixel? 4 ways to fix tap-to-pay

Who owns AI risk at work? Business and tech leaders can’t agree, PwC survey finds

openSUSE Leap adds a new security layer: Immutable mode

Your iPhone just got a hidden anti-scam upgrade in iOS 27: How to enable it

Pearson’s Workera deal targets a big workplace problem: No time to AI upskill

LLMjacking can run up your business’ AI bill fast – how to stop it

Is ChatGPT your new Google Workspace alternative? Meet Space, Pages, and slides

The Security Ledger

CyberSecIntelligence

פקודות בסיסיות בלינוקס - תרגול 3

פקודות בסיסיות בלינוקס - תרגול 2

פקודות בסיסיות בלינוקס

פקודות בסיסיות בלינוקס - תרגול 1