177 Security Blogs

Last Updated: 13 Apr 26 17:59 UTC

Blog List | Github | OPML

2026-04-14

Elastic Security Labs
Phantom in the vault: Obsidian abused to deliver PhantomPulse RAT


2026-04-13

Schneier on Security
On Anthropic’s Mythos Preview and Project Glasswing

Varonis
Deep Dive into Architectural Vulnerabilities in Agentic LLM Browsers

Dark Reading
APT41 Delivers 'Zero-Detection' Backdoor to Harvest Cloud Credentials

Cloudflare
Agents have their own computers with Sandboxes GA

Cloudflare
Durable Objects in Dynamic Workers: Give each AI-generated app its own database

ISC SANS
Scans for EncystPHP Webshell, (Mon, Apr 13th)

Cloudflare
Dynamic, identity-aware, and secure Sandbox auth

Rapid7
Turning Log Lines into Answers: Instant Clarity for SOC Teams

Aikido
Bug bounty isn’t dead, but the old model is breaking

Malwarebytes
Simply opening a PDF could trigger this Adobe Reader zero-day

Project Black
LibreNMS < 26.3.0 Authenticated RCE & XSS

Schneier on Security
AI Chatbots and Trust

Binarly
Binarly Risk Score: A New Approach to Vulnerability Prioritization

Malwarebytes
A week in security (April 6 &#8211; April 12)

ISC SANS
ISC Stormcast For Monday, April 13th, 2026 https://isc.sans.edu/podcastdetail/9888, (Mon, Apr 13th)

Rosecurify
Seclog - #173


2026-04-12

Cloudflare
Welcome to Agents Week

Step Security
Securing Vibe Coding and AI Coding Agents: An End-to-End Approach with StepSecurity

Step Security
Introducing StepSecurity Dev Machine Guard: Protecting Developer Machines from Supply Chain Attacks

Step Security
Top 2024 Predictions for CI/CD Security

MaskRay's Blog
Recent lld/ELF performance improvements


2026-04-10

Schneier on Security
Friday Squid Blogging: Squid Overfishing in the South Pacific

Dark Reading
Hims Breach Exposes the Most Sensitive Kinds of PHI

Dark Reading
Your Next Breach Will Look Like Business as Usual

Rapid7
Metasploit Wrap-Up 04/10/2026

Praetorian
The Attack Helix: Praetorian Guard’s AI Architecture for Offensive Security

Praetorian
Bypassing LLM Supervisor Agents Through Indirect Prompt Injection

Cloudflare
500 Tbps of capacity: 16 years of scaling our global network

Malwarebytes
Fake Claude site installs malware that gives attackers access to your computer

Dark Reading
FINRA Launches Financial Intelligence Fusion Center to Combat Cybersecurity and Fraud Threats

Talos Intelligence
[Video] The TTP Ep. 22: The Collapse of the Patch Window

Google Security Blog
Bringing Rust to the Pixel Baseband

Dark Reading
Orange Business Reimagines Enterprise Voice Communications With Trust and AI

Malwarebytes
ClickFix finds a new way to infect Macs

Dark Reading
Industrial Controllers Still Vulnerable As Conflicts Move to Cyber

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 15

Dark Reading
Can Anthropic Keep Its Exploit-Writing AI Out of the Wrong Hands?

NVISO Labs
Security’s Blind Spot: Physical Keyloggers That Bypass Antivirus Entirely

Schneier on Security
Sen. Sanders Talks to Claude About AI and Privacy

Moonlock
How to identify and remove a remote access trojan (RAT)

ISC SANS
Obfuscated JavaScript or Nothing, (Thu, Apr 9th)

Moonlock
Do Macs need antivirus software, or is built-in malware protection enough?

Moonlock
North Korean “Sapphire Sleet” targets Macs via malicious npm packages

Moonlock
Stealer season: Why MacSync and AMOS are the biggest threats to your Mac

Moonlock
This new macOS stealer hand-picks its victims by wallet size

Auth0
OpenClaw's Credential Problem Is Not a Secrets Problem

Snyk
Governing Security in the Age of Infinite Signal – From Discovery to Control

Greynoise
Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet

Datadog HQ
Introducing our open source AI-native SAST

Sansec Threat Research
ClickFix malware hits DoD cybersecurity vendor homepage


2026-04-09

Dark Reading
Russia's 'Fancy Bear' APT Continues Its Global Onslaught

Dark Reading
'BlueHammer' Windows Zero-Day Exploit Signals Microsoft Bug Disclosure Issues

Step Security
Datadog's DevSecOps 2026 Report Validates What We've Been Building

Step Security
@velora-dex/sdk Compromised on npm: Malicious Version Drops macOS Backdoor via launchctl Persistence

Step Security
Dev Machine Guard Is Now Open Source: See What's Really Running on Your Developer Machine

Step Security
Behind the Scenes: How StepSecurity Detected and Helped Remediate the Largest npm Supply Chain Attack

Step Security
hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far

Step Security
Cline Supply Chain Attack Detected: cline@2.3.0 Silently Installs OpenClaw

Step Security
StepSecurity’s Unified Protection Across the SDLC Infrastructure Threat Framework (SITF)

Step Security
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan

Step Security
10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions

Microsoft Security
The agentic SOC—Rethinking SecOps for the next decade

Bishop Fox Security
Inside Cirro: Attack Paths, Cloud Graphs, and Extensible Schemas

Dark Reading
Do Ceasefires Slow Cyberattacks? History Suggests Not

Talos Intelligence
The threat hunter’s gambit

Rapid7
What Project Glasswing Means for Security Leaders

Google Security Blog
Protecting Cookies with Device Bound Session Credentials

Mend
Anthropic’s Project Glasswing: What It Means for AppSec

Meta Security
Escaping the Fork: How Meta Modernized WebRTC Across 50+ Use Cases

Microsoft Security
Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

Red Siege InfoSec Blog
When All Else Fails: PowerShell Reflective Assembly Loading

Red Siege InfoSec Blog
Tool – EyeWitness

Microsoft Security
Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

Malwarebytes
Scammers pose as Amazon support to steal your account

SentinelOne
Edge Decay: How a Failing Perimeter Is Fueling Modern Intrusions

Eclypsium
FCC Bans Routers Made Outside USA. But What IS a Router?

Rapid7
What’s New in Rapid7 Products and Services: Q1 2026 in Review

Malwarebytes
NSFW app leak exposes 70,000 prompts linked to individual users

Trail of Bits
Master C and C++ with our new Testing Handbook chapter

Schneier on Security
On Microsoft’s Lousy Cloud Security

Malwarebytes
30,000 private Facebook images allegedly downloaded by Meta employee

Talos Intelligence
From the field to the report and back again: How incident responders can use the Year in Review

Malwarebytes
This fake Windows support website delivers password-stealing malware

TrustedSec
IAM the Captain Now – Hijacking Azure Identity Access

ISC SANS
ISC Stormcast For Thursday, April 9th, 2026 https://isc.sans.edu/podcastdetail/9886, (Thu, Apr 9th)

Dark Reading
Russia's Forest Blizzard Nabs Rafts of Logins via SOHO Routers

ISC SANS
Number Usage in Passwords: Take Two, (Thu, Apr 9th)

Datadog HQ
Instrument and monitor Boomi integration flows with OpenTelemetry and Datadog

Infernux Blog
Update: Log Horizon

Teleport Blog
From Plaintext, to BLESS, to Identity: The Evolution of Secure Remote Access

Auth0
Secure Ruby on Rails RAG Applications with Auth0 FGA

Datadog HQ
Integrate Recorded Future threat intelligence with Datadog Cloud SIEM

Datadog HQ
Platform engineering metrics: What to measure and what to ignore

Datadog HQ
Not all index scans are equal: How we cut query latency by over 99%

Elastic Security Labs
Elastic on Defence Cyber Marvel 2026: A Technical overview from the Exercise Floor


2026-04-08

Ars Technica Security
Iran-linked hackers disrupt operations at US critical infrastructure sites

Dark Reading
Threat Actors Get Crafty With Emojis to Escape Detection

Dark Reading
AI-Led Remediation Crisis Prompts HackerOne to Pause Bug Bounties

Meta Security
Trust But Canary: Configuration Safety at Scale

Amazon Security
A framework for securely collecting forensic artifacts into S3 buckets

ISC SANS
TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th)

Zero Day Initiative
Node.js Trust Falls: Dangerous Module Resolution on Windows

Dark Reading
Fraud Rockets Higher in Mobile-First Latin America

Aikido
GlassWorm goes native: New Zig dropper infects every IDE on your machine

Dark Reading
Full Sail University to Open IBM Cyber Defense Range Powered by AWS and Cloud Range on Campus

Searchlight Cyber
The True Cost of a Ransomware Attack in 2026

Malwarebytes
Your extensions leak clues about you, so we made sure Browser Guard doesn&#8217;t

ISC SANS
More Honeypot Fingerprinting Scans, (Wed, Apr 8th)

Dark Reading
Niobium Introduces The Fog

Dark Reading
Pluralsight Launches SecureReady to Help Organizations Build Job-Ready Cybersecurity Teams

Palo Alto Networks
Announcing ADEM Universal Agent

Black Hills Info Sec
Getting Started In Pentesting – Advice From The BHIS Pentest Lead

The Citizen Lab
Submission to the UN Working Group on the Use of Mercenaries

Dark Reading
Iranian Threat Actors Disrupt US Critical Infrastructure via Exposed PLCs

The Citizen Lab
A Cat-and-Mouse Game of Russian Internet Restrictions and Evasion

Rapid7
FortiGate CVE-2025-59718 Exploitation: Incident Response Findings

Malwarebytes
Russian hacking group targets home and small office routers to spy on users

Searchlight Cyber
What Are the Four Ways CTEM Fails Without ASM?

Searchlight Cyber
April 7th – This Week’s Top Cybersecurity and Dark Web Stories

Cloudflare
From bytecode to bytes: automated magic packet generation

Aikido
Aikido Attack finds multiple 0-days in Hoppscotch

Ars Technica Security
Thousands of consumer routers hacked by Russia's military

Schneier on Security
Python Supply-Chain Compromise

Malwarebytes
Timeshare owners warned to watch out for cartel-linked scams

Security Cafe
When AI Understands Code: Prompt Injection to RCE

Talos Intelligence
New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations

Searchlight Cyber
How Do You Build An Attack Surface Management Program?

Embrace The Red
Given Enough Agents, All Bugs Become Shallow

Moonlock
How can you detect and remove keyloggers?

Moonlock
Notorious hacker returns with a new Mac stealer targeting $10K+ crypto wallets

ISC SANS
ISC Stormcast For Wednesday, April 8th, 2026 https://isc.sans.edu/podcastdetail/9884, (Wed, Apr 8th)

Datadog HQ
CI/CD security: How to secure your GitHub ecosystem

Teleport Blog
NIST 800-171 and Agentic AI: What Autonomous Systems Mean for CUI Protection

Datadog HQ
Ingress NGINX is EOL: A practical guide for migrating to Kubernetes Gateway API

Datadog HQ
CI/CD security: threat modeling using a MITRE-style threat matrix

CrankySec
A New New Hope

Auth0
One Tenant, Unlimited Brand Experiences


2026-04-07

Cloudflare
Cloudflare targets 2029 for full post-quantum security

Dark Reading
Storm-1175 Deploys Medusa Ransomware at 'High Velocity'

Eclypsium
BTS #71 - What Makes a Device a Router?

Dark Reading
Grafana Patches AI Bug That Could Have Leaked User Data

Palo Alto Networks
Palo Alto Networks at Nutanix .NEXT 2026

ISC SANS
A Little Bit Pivoting: What Web Shells are Attackers Looking for&#x3f;, (Tue, Apr 7th)

Amazon Security
Building AI defenses at scale: Before the threats emerge

Schneier on Security
Cybersecurity in the Age of Instant Software

Krebs on Security
Russia Hacked Routers to Steal Microsoft Office Tokens

Google Safety & Security
Here’s how we built Gmail to keep your data secure and private in the Gemini era.

Dark Reading
RSAC 2026: How AI Is Reshaping Cybersecurity Faster Than Ever

Dark Reading
Human vs. AI: Debates Shape RSAC 2026 Cybersecurity Trends

Dark Reading
Lies, Damned Lies, and Cybersecurity Metrics

Microsoft Security
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

Mend
Container Security Without Context Is Just More Noise

Rapid7
A First Look at Our Speaker Lineup and Agenda for the Rapid7 2026 Global Cybersecurity Summit

Dark Reading
Focusing on the People in Cybersecurity at RSAC 2026 Conference

Bishop Fox Security
API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616

Talos Intelligence
Talos Takes: 2025's ransomware trends and zombie vulnerabilities

Malwarebytes
Traffic violation scams swap links for QR codes to steal your card details

Searchlight Cyber
Your Complete Guide to Continuous Threat Exposure Management

Trail of Bits
What we learned about TEE security from auditing WhatsApp's Private Inference

Malwarebytes
Support platform breach exposes Hims &amp; Hers customer data

Talos Intelligence
The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines

Talos Intelligence
Year in Review: Vulnerabilities old and new and something React2

Schneier on Security
Hong Kong Police Can Force You to Reveal Your Encryption Keys

Compass Security Blog
Common Entra ID Security Assessment Findings – Part 3: Weak Privileged Identity Management Configuration

Snyk
Secure What Matters: Scaling Effortless Container Security for the AI Era

TrustedSec
Building a Detection Foundation: Part 5 - Correlation in Practice

ISC SANS
ISC Stormcast For Tuesday, April 7th, 2026 https://isc.sans.edu/podcastdetail/9882, (Tue, Apr 7th)

Troy Hunt
Weekly Update 498

Datadog HQ
Operating agentic AI with Amazon Bedrock AgentCore and Datadog LLM Observability: Lessons from NTT DATA

Datadog HQ
Introducing the Datadog Code Security MCP

Greynoise
Introducing C2 Detection: Know When Your Edge Devices Are Calling Home to Attackers

Sansec Threat Research
SVG Onload Tag Hides Magecart Skimmer on 99 Stores


2026-04-06

Dark Reading
AI-Assisted Supply Chain Attack Targets GitHub

Cloudflare
How we built Organizations to help enterprises manage Cloudflare at scale

Dark Reading
Axios Attack Shows How Complex Social Engineering Is Industrialized

Dark Reading
Fortinet Issues Emergency Patch for FortiClient Zero-Day

Schneier on Security
New Mexico’s Meta Ruling and Encryption