Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 12)

331.

Post Purchase Guide: Is Your AI Pentesting Tool Actually Working? - 7-Step Renewal Decision Framework

blog | 2026-07-27 17:21 | xbow.com | original ↗ | #ai-security | #pentesting | #appsec

332.

IonStack part III: Rooting Android 17 with GhostLock

vulnerability | High | 2026-07-15 00:00 | CVE-2026-43499 | nebusec.ai | original ↗ | #public-poc | #featured | #vulnerability-research

333.

Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats

blog | 2026-07-29 00:00 | crowdstrike.com | original ↗ | #threat-intelligence | #siem | #threat-detection

334.

Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud

blog | 2026-07-29 00:00 | crowdstrike.com | original ↗ | #cloud | #cloud-security | #devsecops

335.

Incremental Testing: Continuous Pentesting at the Speed of Development

blog | 2026-07-29 00:00 | tenzai.com | original ↗ | #ai-security | #pentesting | #appsec

336.

AD Group Risks: Hidden Dangers in Backup Operators

blog | 2026-07-28 16:40 | semperis.com | original ↗ | #active-directory | #backup-security | #privilege-escalation

337.

The risk hiding behind exposed MCP servers

blog | 2026-07-28 15:58 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

338.

Accelerating CISA BOD 26-04 Vulnerability and Triage Activities through Wiz

blog | 2026-07-28 11:00 | wiz.io | original ↗ | #vulnerability-management | #cisa | #compliance

339.

Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon

blog | 2026-07-28 00:00 | hunt.io | original ↗ | #threat-intelligence | #malware | #mobile-security

340.

Introducing Automation Rules: From exploit proof to validated fix, automatically.

blog | 2026-07-28 00:00 | tenzai.com | original ↗ | #pentesting | #vulnerability-management | #devsecops

341.

Claude Opus 5 on GitLab: Reasoning built for the hard tasks

blog | 2026-07-27 00:00 | about.gitlab.com | original ↗ | #ai-security | #agentic-ai | #gitlab

342.

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

blog | 2026-07-27 21:30 | jfrog.com | original ↗ | #ai-security | #supply-chain | #zero-day

343.

Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym

blog | 2026-07-27 14:00 | wiz.io | original ↗ | #ai-security | #vulnerability-research | #open-source

344.

AsyncAPI npm packages backdoored via GitHub Actions

incident | 2026-07-14 00:00 | aikido.dev | original ↗ | #supply-chain | #featured | #incident-response

345.

CrowdStrike Joins the Open Secure AI Alliance to Advance AI Safety and Security

blog | 2026-07-27 00:00 | crowdstrike.com | original ↗ | #ai-security | #vulnerability-research | #open-source

346.

5 High-Impact Use Cases for Falcon Onum

blog | 2026-07-27 00:00 | crowdstrike.com | original ↗ | #siem | #security-telemetry | #agentic-soc

347.

Introducing Internal Network Scanning: see your network the way an attacker inside it would

vulnerability | 2026-07-21 21:48 | projectdiscovery.io | original ↗ | #bug-bounty | #zero-day | #red-team

348.

CVE-2026-14077: Select Your Own Origin - Spoofing Chrome's Address Bar

vulnerability | Medium | 2026-07-20 11:22 | CVE-2026-14077 | pwn.ai | original ↗ | #ai-security | #vulnerability-research | #browser-security

349.

‘One challenging thing about Bug Bounty is when it’s black box’: sunshinefactory on bug hunting, CTFs and hardware hacking

blog | 2026-07-24 08:21 | yeswehack.com | original ↗ | #bug-bounty | #ctf | #hardware-security

350.

Oh My Rogue Agent

research | 2026-07-22 20:37 | projectdiscovery.io | original ↗ | #ai-security | #bug-bounty

351.

AI lectures with Dr. Brumley Part 2 | The anatomy of a modern AI system

blog | 2026-07-23 12:00 | bugcrowd.com | original ↗ | #ai-security | #supply-chain | #ai-safety

352.

Evaluating Pentesting Agents for the Real-World Part 2

research | 2026-07-22 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #agentic-ai

353.

IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT

vulnerability | High | 2026-07-10 00:00 | CVE-2026-10702 | nebusec.ai | original ↗ | #rce | #featured | #vulnerability-research

354.

National CTF 2025 — Results, Highlights & Winners

blog | 2026-07-23 16:28 | hackenproof.com | original ↗ | #web3 | #ctf | #security-community

355.

Midnight in the War Room: The CISOs’ Challenge Comes to the Screen

blog | 2026-07-23 17:32 | semperis.com | original ↗ | #incident-response | #black-hat | #security-culture

356.

Why Model Routing Backfires and How to Build Agents That Don’t Burn Your Budget

blog | 2026-07-23 17:16 | jfrog.com | original ↗ | #ai-agents | #model-routing | #llm-costs

357.

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

research | 2026-07-21 13:16 | jfrog.com | original ↗ | #supply-chain | #typosquatting | #dotnet

358.

Better generic secrets detection starts with finding non-secrets

blog | 2026-07-23 00:00 | aikido.dev | original ↗ | #appsec | #secrets | #detection-engineering

359.

Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

blog | 2026-07-23 00:00 | hunt.io | original ↗ | #ai-security | #threat-intelligence | #malware

360.

Nextcloud CVE-2026-45281 Cross-Account Calendar Takeover

vulnerability | High | 2026-07-17 00:00 | CVE-2026-45281 | ethiack.com | original ↗ | #vulnerability-research | #access-control | #calendar-security

← Previous More →