177 Security Blogs

Last Updated: 15 Apr 26 11:00 UTC

Blog List | Github | OPML

2026-04-15

Schneier on Security
Defense in Depth, Medieval Style

Talos Intelligence
The n8n n8mare: How threat actors are misusing AI workflow automation

Malwarebytes
April Patch Tuesday fixes two zero-days, including one under active attack

Malwarebytes
Credit Resources Vault: Why this credit email set off our scam alarms

Searchlight Cyber
April 14th – This Week’s Top Cybersecurity and Dark Web Stories

ISC SANS
ISC Stormcast For Wednesday, April 15th, 2026 https://isc.sans.edu/podcastdetail/9892, (Wed, Apr 15th)

ISC SANS
Scanning for AI Models, (Tue, Apr 14th)

Dark Reading
Microsoft Bets $10 Billion to Boost Japan's AI, Cybersecurity


2026-04-14

SentinelOne
Securing the Software Supply Chain: How SentinelOne’s AI EDR Autonomously Blocked the CPU-Z Watering Hole Cyber Attack

Amazon Security
Secure AI agent access patterns to AWS resources using Model Context Protocol

Rapid7
Patch Tuesday - April 2026

Krebs on Security
Patch Tuesday, April 2026 Edition

Dark Reading
Privilege Elevation Dominates Massive Microsoft Patch Update

The Citizen Lab
Beijing Codifies Repression of Overseas Activists

Talos Intelligence
Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities

Dark Reading
EDR-Killer Ecosystem Expansion Requires Stronger BYOVD Defenses

Ars Technica Security
UK gov's Mythos AI tests help separate cybersecurity threat from hype

Github Security Blog
Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game

Zero Day Initiative
The April 2026 Security Update Review

ISC SANS
Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)

Auth0
How to Monitor Auth0 Usage Metrics

Dark Reading
War Game Exercise Demonstrates How Social Media Manipulation Works

Schneier on Security
Upcoming Speaking Engagements

Varonis
How Varonis Atlas Enables ISO/IEC 42001 Compliance

Github Security Blog
How exposed is your code? Find out in minutes—for free

Talos Intelligence
State-sponsored threats: Different objectives, similar access paths

Cloudflare
Securing non-human identities: automated revocation, OAuth, and scoped permissions

Cloudflare
Managed OAuth for Access: make internal apps agent-ready in one click

Cloudflare
Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP

Cloudflare
Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh

Bishop Fox Security
Anthropic’s Claude Mythos Preview: The AI Cybersecurity Inflection Point

Aikido
Axios CVE-2026-40175: a critical bug that’s… not exploitable

Rapid7
Your Cloud Detection Strategy in 2026: What to Expect at the Global Cybersecurity Summit

Malwarebytes
Omnistealer uses the blockchain to steal everything it can

Schneier on Security
How Hackers Are Thinking About AI

Malwarebytes
ChatGPT under scrutiny as Florida investigates campus shooting

Compass Security Blog
Common Entra ID Security Assessment Findings – Part 4: Weak Conditional Access Policies

Troy Hunt
Weekly Update 499

TrustedSec
Benchmarking Self-Hosted LLMs for Offensive Security

ISC SANS
ISC Stormcast For Tuesday, April 14th, 2026 https://isc.sans.edu/podcastdetail/9890, (Tue, Apr 14th)

Elastic Security Labs
Phantom in the vault: Obsidian abused to deliver PhantomPulse RAT

Auth0
How to Enable Self-Service Identity Management for B2B SaaS in Auth0

Datadog HQ
Offline evaluation for AI agents: Best practices

Sansec Threat Research
Over 200 PrestaShop stores expose installer, allowing full takeover

Datadog HQ
Detect runtime threats in Python Lambda functions with Datadog AAP


2026-04-13

Dark Reading
Why Orgs Need to Test Networks to Withstand DDoS Attacks During Peak Loads

Dark Reading
CSA: CISOs Should Prepare for Post-Mythos Exploit Storm

Dark Reading
Adobe Patches Actively Exploited Zero-Day That Lingered for Months

Dark Reading
Empty Attestations: OT Lacks the Tools for Cryptographic Readiness

Schneier on Security
On Anthropic’s Mythos Preview and Project Glasswing

Varonis
Deep Dive into Architectural Vulnerabilities in Agentic LLM Browsers

Dark Reading
APT41 Delivers 'Zero-Detection' Backdoor to Harvest Cloud Credentials

Cloudflare
Building a CLI for all of Cloudflare

Cloudflare
Durable Objects in Dynamic Workers: Give each AI-generated app its own database

Cloudflare
Agents have their own computers with Sandboxes GA

ISC SANS
Scans for EncystPHP Webshell, (Mon, Apr 13th)

Cloudflare
Dynamic, identity-aware, and secure Sandbox auth

Rapid7
Turning Log Lines into Answers: Instant Clarity for SOC Teams

Aikido
Bug bounty isn’t dead, but the old model is breaking

Malwarebytes
Simply opening a PDF could trigger this Adobe Reader zero-day

Project Black
LibreNMS < 26.3.0 Authenticated RCE & XSS

Schneier on Security
AI Chatbots and Trust

Binarly
Binarly Risk Score: A New Approach to Vulnerability Prioritization

Malwarebytes
A week in security (April 6 &#8211; April 12)

ISC SANS
ISC Stormcast For Monday, April 13th, 2026 https://isc.sans.edu/podcastdetail/9888, (Mon, Apr 13th)

Rosecurify
Seclog - #173


2026-04-12

Cloudflare
Welcome to Agents Week

Step Security
Securing Vibe Coding and AI Coding Agents: An End-to-End Approach with StepSecurity

Step Security
Introducing StepSecurity Dev Machine Guard: Protecting Developer Machines from Supply Chain Attacks

Step Security
Top 2024 Predictions for CI/CD Security

MaskRay's Blog
Recent lld/ELF performance improvements


2026-04-10

Schneier on Security
Friday Squid Blogging: Squid Overfishing in the South Pacific

Dark Reading
Hims Breach Exposes the Most Sensitive Kinds of PHI

Dark Reading
Your Next Breach Will Look Like Business as Usual

Rapid7
Metasploit Wrap-Up 04/10/2026

Praetorian
The Attack Helix: Praetorian Guard’s AI Architecture for Offensive Security

Praetorian
Bypassing LLM Supervisor Agents Through Indirect Prompt Injection

Cloudflare
500 Tbps of capacity: 16 years of scaling our global network

Malwarebytes
Fake Claude site installs malware that gives attackers access to your computer

Dark Reading
FINRA Launches Financial Intelligence Fusion Center to Combat Cybersecurity and Fraud Threats

Talos Intelligence
[Video] The TTP Ep. 22: The Collapse of the Patch Window

Google Security Blog
Bringing Rust to the Pixel Baseband

Dark Reading
Orange Business Reimagines Enterprise Voice Communications With Trust and AI

Malwarebytes
ClickFix finds a new way to infect Macs

Dark Reading
Industrial Controllers Still Vulnerable As Conflicts Move to Cyber

SentinelOne
The Good, the Bad and the Ugly in Cybersecurity – Week 15

Dark Reading
Can Anthropic Keep Its Exploit-Writing AI Out of the Wrong Hands?

NVISO Labs
Security’s Blind Spot: Physical Keyloggers That Bypass Antivirus Entirely

Schneier on Security
Sen. Sanders Talks to Claude About AI and Privacy

Moonlock
How to identify and remove a remote access trojan (RAT)

ISC SANS
Obfuscated JavaScript or Nothing, (Thu, Apr 9th)

Moonlock
Do Macs need antivirus software, or is built-in malware protection enough?

Moonlock
This new macOS stealer hand-picks its victims by wallet size

Moonlock
North Korean “Sapphire Sleet” targets Macs via malicious npm packages

Moonlock
Stealer season: Why MacSync and AMOS are the biggest threats to your Mac

Auth0
OpenClaw's Credential Problem Is Not a Secrets Problem

Snyk
Governing Security in the Age of Infinite Signal – From Discovery to Control

Greynoise
Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet

Datadog HQ
Introducing our open source AI-native SAST

Sansec Threat Research
ClickFix malware hits DoD cybersecurity vendor homepage


2026-04-09

Dark Reading
Russia's 'Fancy Bear' APT Continues Its Global Onslaught

Dark Reading
'BlueHammer' Windows Zero-Day Exploit Signals Microsoft Bug Disclosure Issues

Step Security
StepSecurity’s Unified Protection Across the SDLC Infrastructure Threat Framework (SITF)

Step Security
Dev Machine Guard Is Now Open Source: See What's Really Running on Your Developer Machine

Step Security
Cline Supply Chain Attack Detected: cline@2.3.0 Silently Installs OpenClaw

Step Security
hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far

Step Security
Datadog's DevSecOps 2026 Report Validates What We've Been Building

Step Security
@velora-dex/sdk Compromised on npm: Malicious Version Drops macOS Backdoor via launchctl Persistence

Step Security
Behind the Scenes: How StepSecurity Detected and Helped Remediate the Largest npm Supply Chain Attack

Step Security
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan

Step Security
10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions

Bishop Fox Security
Inside Cirro: Attack Paths, Cloud Graphs, and Extensible Schemas

Microsoft Security
The agentic SOC—Rethinking SecOps for the next decade

Dark Reading
Do Ceasefires Slow Cyberattacks? History Suggests Not

Talos Intelligence
The threat hunter’s gambit

Rapid7
What Project Glasswing Means for Security Leaders

Google Security Blog
Protecting Cookies with Device Bound Session Credentials

Mend
Anthropic’s Project Glasswing: What It Means for AppSec

Meta Security
Escaping the Fork: How Meta Modernized WebRTC Across 50+ Use Cases

Microsoft Security
Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

Red Siege InfoSec Blog
When All Else Fails: PowerShell Reflective Assembly Loading

Red Siege InfoSec Blog
Tool – EyeWitness

Microsoft Security
Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

Malwarebytes
Scammers pose as Amazon support to steal your account

SentinelOne
Edge Decay: How a Failing Perimeter Is Fueling Modern Intrusions

Eclypsium
FCC Bans Routers Made Outside USA. But What IS a Router?

Rapid7
What’s New in Rapid7 Products and Services: Q1 2026 in Review

Malwarebytes
NSFW app leak exposes 70,000 prompts linked to individual users

Trail of Bits
Master C and C++ with our new Testing Handbook chapter

Schneier on Security
On Microsoft’s Lousy Cloud Security

Malwarebytes
30,000 private Facebook images allegedly downloaded by Meta employee

Talos Intelligence
From the field to the report and back again: How incident responders can use the Year in Review

Malwarebytes
This fake Windows support website delivers password-stealing malware

TrustedSec
IAM the Captain Now – Hijacking Azure Identity Access

ISC SANS
ISC Stormcast For Thursday, April 9th, 2026 https://isc.sans.edu/podcastdetail/9886, (Thu, Apr 9th)

Dark Reading
Russia's Forest Blizzard Nabs Rafts of Logins via SOHO Routers

ISC SANS
Number Usage in Passwords: Take Two, (Thu, Apr 9th)

Teleport Blog
From Plaintext, to BLESS, to Identity: The Evolution of Secure Remote Access

Datadog HQ
Not all index scans are equal: How we cut query latency by over 99%

Datadog HQ
Platform engineering metrics: What to measure and what to ignore

Datadog HQ
Integrate Recorded Future threat intelligence with Datadog Cloud SIEM

Datadog HQ
Instrument and monitor Boomi integration flows with OpenTelemetry and Datadog

Infernux Blog
Update: Log Horizon

Auth0
Secure Ruby on Rails RAG Applications with Auth0 FGA

Elastic Security Labs
Elastic on Defence Cyber Marvel 2026: A Technical overview from the Exercise Floor


2026-04-08

Ars Technica Security
Iran-linked hackers disrupt operations at US critical infrastructure sites

Dark Reading
Threat Actors Get Crafty With Emojis to Escape Detection

Dark Reading
AI-Led Remediation Crisis Prompts HackerOne to Pause Bug Bounties

Meta Security
Trust But Canary: Configuration Safety at Scale

Amazon Security
A framework for securely collecting forensic artifacts into S3 buckets

ISC SANS
TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th)

Zero Day Initiative
Node.js Trust Falls: Dangerous Module Resolution on Windows

Dark Reading
Fraud Rockets Higher in Mobile-First Latin America

Aikido
GlassWorm goes native: New Zig dropper infects every IDE on your machine

Dark Reading
Full Sail University to Open IBM Cyber Defense Range Powered by AWS and Cloud Range on Campus

Searchlight Cyber
The True Cost of a Ransomware Attack in 2026

Malwarebytes
Your extensions leak clues about you, so we made sure Browser Guard doesn&#8217;t

Dark Reading
Niobium Introduces The Fog

Dark Reading
Pluralsight Launches SecureReady to Help Organizations Build Job-Ready Cybersecurity Teams

Palo Alto Networks
Announcing ADEM Universal Agent

Black Hills Info Sec
Getting Started In Pentesting – Advice From The BHIS Pentest Lead

The Citizen Lab
Submission to the UN Working Group on the Use of Mercenaries

Dark Reading
Iranian Threat Actors Disrupt US Critical Infrastructure via Exposed PLCs

The Citizen Lab
A Cat-and-Mouse Game of Russian Internet Restrictions and Evasion

Rapid7
FortiGate CVE-2025-59718 Exploitation: Incident Response Findings

Malwarebytes
Russian hacking group targets home and small office routers to spy on users

Searchlight Cyber
What Are the Four Ways CTEM Fails Without ASM?

Searchlight Cyber
April 7th – This Week’s Top Cybersecurity and Dark Web Stories

Cloudflare
From bytecode to bytes: automated magic packet generation

Aikido
Aikido Attack finds multiple 0-days in Hoppscotch

Ars Technica Security
Thousands of consumer routers hacked by Russia's military