2026-04-07
Dark Reading
Lies, Damned Lies, and Cybersecurity Metrics
Rapid7
A First Look at Our Speaker Lineup and Agenda for the Rapid7 2026 Global Cybersecurity Summit
Talos Intelligence
Talos Takes: 2025's ransomware trends and zombie vulnerabilities
Talos Intelligence
The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines
Talos Intelligence
Year in Review: Vulnerabilities old and new and something React2
Schneier on Security
Hong Kong Police Can Force You to Reveal Your Encryption Keys
Compass Security Blog
Common Entra ID Security Assessment Findings – Part 3: Weak Privileged Identity Management Configuration
ISC SANS
ISC Stormcast For Tuesday, April 7th, 2026 https://isc.sans.edu/podcastdetail/9882, (Tue, Apr 7th)
Troy Hunt
Weekly Update 498
Sansec Threat Research
SVG Onload Tag Hides Magecart Skimmer on 99 Stores
2026-04-06
Dark Reading
AI-Assisted Supply Chain Attack Targets GitHub
Schneier on Security
New Mexico’s Meta Ruling and Encryption
Step Security
Behind the Scenes: How StepSecurity Detected and Helped Remediate the Largest npm Supply Chain Attack
Microsoft Security
Inside an AI‑enabled device code phishing campaign
Microsoft Security
Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations
Bishop Fox Security
Delivered by Trust: What the Axios Supply Chain Attack Means for Security Leaders
Dark Reading
Shadow AI in Healthcare Is Here to Stay
Black Lantern Security
Artificial Foolishness: The Hidden Dangers of External-Facing LLMs
Schneier on Security
Google Wants to Transition to Post-Quantum Cryptography by 2029
Malwarebytes
A week in security (March 30 – April 5)
Krebs on Security
Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
ISC SANS
ISC Stormcast For Monday, April 6th, 2026 https://isc.sans.edu/podcastdetail/9880, (Mon, Apr 6th)
Rosecurify
Seclog - #172
Infernux Blog
Building a practical log baseline
2026-04-04
Amazon Security
Introducing the Landing Zone Accelerator on AWS Universal Configuration and LZA Compliance Workbook
Elastic Security Labs
Elastic Security Integrations Roundup: Q1 2026
2026-04-03
Schneier on Security
Friday Squid Blogging: Jurassic Fish Chokes on Squid
Ars Technica Security
OpenClaw gives users yet another reason to be freaked out about security
Escape DAST
Everything I Learned About Harness Engineering and AI Factories in San Francisco (April 2026)
Talos Intelligence
Do not get high(jacked) off your own supply (chain)
Dark Reading
Apple Breaks Precedent, Patches DarkSword for iOS 18
Talos Intelligence
Axios NPM supply chain incident
Schneier on Security
Company that Secretly Records and Publishes Zoom Meetings
Trail of Bits
Simplifying MBA obfuscation with CoBRA
Step Security
10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions
ISC SANS
ISC Stormcast For Friday, April 3rd, 2026 https://isc.sans.edu/podcastdetail/9878, (Fri, Apr 3rd)
2026-04-02
Hybrid Analysis Blog
macOS Sandbox Detonations Offline While We Upgrade for Tahoe Support
Amazon Security
Four security principles for agentic AI systems
SentinelOne
Securing the Supply Chain: How SentinelOne®’s AI EDR Stops the Axios Attack Autonomously
Dark Reading
Security Bosses Are All-In on AI. Here's Why
Talos Intelligence
The democratisation of business email compromise fraud
Schneier on Security
US Bans All Foreign-Made Consumer Routers
Ars Technica Security
New Rowhammer attacks give complete control of machines running Nvidia GPUs
Google Security Blog
Google Workspace’s continuous approach to mitigating indirect prompt injections
Microsoft Security
Threat actor abuse of AI accelerates from tool to cyberattack surface
Microsoft Security
Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments
Searchlight Cyber
Why Do Most Ransomware Defenses Start Too Late?
Malwarebytes
Apple expands “DarkSword” patches to iOS 18.7.7
Talos Intelligence
[Video] The TTP Ep 21: When Attackers Become Trusted Users
Cloudflare
Why we're rethinking cache for the AI era
Dark Reading
Bank Trojan 'Casbaneiro' Worms Through Latin America
Schneier on Security
Possible US Government iPhone Hacking Tool Leaked
Talos Intelligence
UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applications
Talos Intelligence
Qilin EDR killer infection chain
Talos Intelligence
Inside the Talos 2025 Year in Review: A discussion on what the data means for defenders
watchTowr Labs
You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)
Talos Intelligence
An overview of ransomware threats in Japan in 2025 and early detection insights from Qilin cases
Step Security
Malicious IoliteLabs VSCode Extensions Target Solidity Developers on Windows, macOS, and Linux with Backdoor
ISC SANS
ISC Stormcast For Thursday, April 2nd, 2026 https://isc.sans.edu/podcastdetail/9876, (Thu, Apr 2nd)
Elastic Security Labs
Prioritizing Alerts Triage with Higher-Order Detection Rules
Elastic Security Labs
Hooked on Linux: Rootkit Detection Engineering
Elastic Security Labs
How we caught the Axios supply chain attack
2026-04-01
itm4n's Blog
BitLocker's Little Secrets: The Undocumented FVE API
Microsoft Security
Mitigating the Axios npm supply chain compromise
Github Security Blog
Securing the open source supply chain across GitHub
Schneier on Security
Is “Hackback” Official US Cybersecurity Strategy?
The Citizen Lab
The Perils of Privatized Cyberwarfare
Black Hills Info Sec
Cloud Security: Tips and Resources for Securing the Cloud
Offensive Security
Shadow AI: How Unsanctioned Tools Create Invisible Risk
SentinelOne
The Implementation Blind Spot | Why Organizations Are Confusing Temporary Friction with Permanent Safety
Searchlight Cyber
The 2026 ‘Forum Wars’: Deconstructing the BreachForums Drama
Trail of Bits
Mutation testing for the agentic era
Dark Reading
Are We Training AI Too Late?
Searchlight Cyber
March 30th – This Week’s Top Cybersecurity and Dark Web Stories
Schneier on Security
A Taxonomy of Cognitive Security
Palo Alto Networks
Closing the Gap by Enhancing Visibility and Mitigating Risks
ISC SANS
ISC Stormcast For Wednesday, April 1st, 2026 https://isc.sans.edu/podcastdetail/9874, (Wed, Apr 1st)
Infernux Blog
Tool Release: Log Horizon
Elastic Security Labs
Elastic releases detections for the Axios supply chain compromise
Elastic Security Labs
Inside the Axios supply chain compromise - one RAT to rule them all
2026-03-31
Dark Reading
Axios NPM Package Compromised in Precision Attack
Amazon Security
New compliance guide available: ISO/IEC 27001:2022 on AWS
Ars Technica Security
Quantum computers need vastly fewer resources than thought to break vital encryption
Microsoft Security
The threat to critical infrastructure has changed. Has your readiness?
Google Security Blog
VRP 2025 Year in Review
Meta Security
Meta Adaptive Ranking Model: Bending the Inference Scaling Curve to Serve LLM-Scale Models for Ads
Microsoft Security
Applying security fundamentals to AI: Practical advice for CISOs
Malwarebytes
Axios supply chain attack chops away at npm trust