Latest security links

1. AI Gave Your Incident Archive a Second Job

   darkreading.com Nov 6, 2026 aiprivacy notes

2. Fake security tools on GitHub push backdoors and infostealers

   bleepingcomputer.com Nov 6, 2026 vulnmalwareprivacyctidlp notes

3. What are Security Logs? Part 1

   detectionengineering.net Nov 6, 2026 privacydetection notes

4. The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

   elastic.co Nov 6, 2026 vulnmalwareidentityprivacychrome-extensionbrowserctidlp notes

5. Cloud Threat Emulation on Autopilot: Context is Everything

   elastic.co Nov 6, 2026 cloudtoolingdetection notes

6. Introducing AlertZero: Inbox zero for your alert queue

   elastic.co Nov 6, 2026 aitooling notes

7. M365 Token Spray and Replay Campaign Compromises Business Email Accounts

   huntress.com Nov 6, 2026 cloudincidentvulnidentityprivacyctidetectioncampaign-compromises notes

8. Cybersecurity Dive: Hackers could poison AI models by tampering with core infrastructure

   eclypsium.com Nov 6, 2026 vulnai notes

9. Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in

   rapid7.com Nov 6, 2026 identityai notes

10. AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

    github.blog Nov 6, 2026 appsecaitooling notes

11. GitHub’s model for secret detection: Finding more secrets with less noise

    github.blog Nov 6, 2026 appseccloudidentityaitooling notes

12. Recorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance

    recordedfuture.com Nov 6, 2026 aiprivacytoolingdlp notes

13. Vulnerability Discovery and Exploitation Trends in the AI Era

    cloud.google.com Nov 6, 2026 researchvulnai notes

14. Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure

    cloud.google.com Nov 6, 2026 appseccloudctisupply-chain notes

15. ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

    cloud.google.com Nov 6, 2026 appsecincidentvulnaptransomwarecticve-2026-35273shinyhuntersunc6240campaign-targeting notes

16. Investigating Ephemeral Supply Chain Tampering

    cloud.google.com Nov 6, 2026 incidentmalwarectisupply-chaindetection notes

17. MadApe: The Code That Opens the Door

    group-ib.com Nov 6, 2026 researchcloudvulnidentityctitooling notes

18. IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It

    bleepingcomputer.com Nov 6, 2026 identityprivacymobile notes

19. YARA-X 1.22.1 Release, (Sat, Oct 31st)

    isc.sans.edu Nov 6, 2026 tooling notes

20. Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers

    thehackernews.com Nov 6, 2026 appseccloudvulnmalwareaichrome-extensionbrowser notes

21. mSecure password manager hack prompts password reset warnings

    bleepingcomputer.com Nov 6, 2026 appsecincidentvulnidentityprivacydlp notes

22. How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders

    crowdstrike.com Nov 6, 2026 vuln notes

23. Backporting security fixes at scale with Codex

    blog.trailofbits.com Nov 6, 2026 vulnaitooling notes

24. Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It

    thehackernews.com Nov 6, 2026 appsecvulncve-2026-83844 notes

25. OneNote File Extraction, (Sun, Nov 1st)

    isc.sans.edu Nov 6, 2026 researchtooling notes

26. Managed for Malice: How Attackers Turn MDM into Remote Access

    huntress.com Nov 6, 2026 researchvulnmalwarecti notes

27. Threat actors use agentic AI tooling to find and abuse exposed secrets

    microsoft.com Nov 6, 2026 appseccloudvulnidentityaiprivacyartexctitooling notes

28. Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior

    elastic.co Nov 6, 2026 researchaitoolingdetection notes

29. Making HTTP header injection critical with one prompt

    portswigger.net Nov 6, 2026 appsecresearchvulntooling notes

30. Camera Management Software Compromise Leads to Malware Deployment

    huntress.com Nov 6, 2026 researchincidentvulnmalwarectidetection notes