Curated security research, vulnerabilities, advisories and tools for practitioners.

#defense

Security coverage tagged defense.

1.

Brotli Client Checker: Test Server for Brotli Decoder Vulnerability (CVE-2026-111497)

tool | 2026-10-27 14:55 | CVE-2026-111497 | github.com | Original ↗ | .md | #rce | #red-team | #defense

2.

php2shell (CVE-2026-109618 / CVE-2026-109619): PHP Pre-Auth RCE PoC, Source Patch & Comprehensive Defense Guide

vulnerability | Critical | 2026-10-21 08:31 | CVE-2026-109618 | github.com | Original ↗ | .md | #rce | #github | #pre-auth

3.

Apple Private Cloud Compute (PCC) Security Source Code and Research Tools

tool | 2026-10-23 16:38 | github.com | Original ↗ | .md | #ai-security | #cloud | #github

4.

Assetnote Releases php2shell-scanner: High-Fidelity Scanner for CVE-2026-109618 & CVE-2026-109619

tool | 2026-10-22 03:53 | github.com | Original ↗ | .md | #rce | #github | #php

5.

KillerLand: Weaponized BYOVD Process Killer Collection Bypassing PPL & EDR Protections

tool | 2026-10-18 05:49 | github.com | Original ↗ | .md | #ai-security | #github | #red-team

6.

LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks

tool | 2026-10-12 08:59 | github.com | Original ↗ | .md | #credential-theft | #microsoft | #windows

7.

What to Do With a Security Finding You Are Not Going to Fix

blog | 2026-10-12 16:13 | borghq.io | Original ↗ | .md | #defense | #methodology | #disclosure

8.

Autonomous Systems are changing the Defence Threat Model | #1

research | 2026-09-30 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #hardware-security

9.

Heap Use-After-Free and Double Free in libheif ImageItem Encoding (GHSA-qwpf-5wf7-r996)

advisory | Medium | 2026-09-21 18:27 | github.com | Original ↗ | .md | #rce | #cve | #libheif

10.

Tesla_OS_On_QEMU: Tooling to Unpack, Patch, and Boot Tesla Infotainment Firmware in QEMU

tool | 2026-09-22 04:34 | github.com | Original ↗ | .md | #red-team | #reverse-engineering | #firmware

11.

ShieldCrash: Windows Defender 0-Day PoC Bypassing ShieldBreak (CVE-2026-69414) Patch

vulnerability | High | 2026-09-07 20:36 | CVE-2026-69414 | github.com | Original ↗ | .md | #cloud | #zero-day | #arbitrary-file-read

12.

Google ARTEMIS: Natural-Language Driven Android Automation & Mobile AI Agent Framework

tool | 2026-09-12 03:00 | github.com | Original ↗ | .md | #ai-security | #automation | #mcp

13.

Flounder: Autonomous AI White-Hat Security Auditor with Execution-Grounded Verification

tool | 2026-09-06 22:13 | github.com | Original ↗ | .md | #ai-security | #bug-bounty | #web3

14.

OpenAI Codex Security: Automated Vulnerability Discovery, Validation, and Remediation CLI & SDK

tool | 2026-08-28 13:51 | github.com | Original ↗ | .md | #ai-security | #devsecops | #sast

15.

From Hugging Face to Fable: this summer shows AI control matters more than trust

blog | 2026-08-13 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #sandbox-escape | #aikido

16.

postMessage targetOrigin bypass via IP normalization

research | 2026-07-06 00:00 | lab.ctbb.show | Original ↗ | .md | #red-team | #defense | #security

17.

Top 10 Critical Threat Actors to Watch in 2026: Ransomware, APTs & Defensive Strategies

incident | 2026-01-23 00:00 | netlas.io | Original ↗ | .md | #threat-intelligence | #ransomware | #apt

18.

Security in 2026: What Breaks, What Scales, and What Survives

blog | 2026-01-13 10:00 | xbow.com | Original ↗ | .md | #ai-security | #defense | #threat-landscape

19.

How Companies Can Test Their Systems Against AI-powered Attacks Like GTG-1002

blog | 2025-11-18 13:00 | xbow.com | Original ↗ | .md | #ai-security | #vulnerability-research | #red-teaming

20.

When AI Turns Criminal: Deepfakes, Voice-Cloning & LLM Malware

blog | 2025-10-31 00:00 | netlas.io | Original ↗ | .md | #ai-security | #malware | #phishing

21.

When Patches Fail: An Analysis of Patch Bypass and Incomplete Security

blog | 2025-10-17 00:00 | netlas.io | Original ↗ | .md | #vulnerability-management | #sharepoint | #patch-bypass

22.

The Pyramid of Pain: Beyond the Basics

blog | 2025-07-25 00:00 | netlas.io | Original ↗ | .md | #threat-intelligence | #defense | #detection

23.

Exploiting the Intruder’s Dilemma for Active Directory Defense

blog | 2025-05-20 13:43 | semperis.com | Original ↗ | .md | #active-directory | #defense | #ad-cs

24.

ESC1 Attack Explained

blog | 2025-05-01 13:29 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #vulnerability

25.

NTDS.DIT Extraction Explained

blog | 2025-04-06 19:46 | semperis.com | Original ↗ | .md | #active-directory | #defense | #detection

26.

How to Defend Against Silver Ticket Attacks

blog | 2025-02-02 22:00 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #kerberos

27.

How to Defend Against SPN Scanning in Active Directory

blog | 2024-07-12 22:40 | semperis.com | Original ↗ | .md | #active-directory | #reconnaissance | #defense

28.

How to Defend Against SID History Injection

blog | 2024-05-03 20:16 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #defense

29.

How to Defend Against an NTLM Relay Attack

blog | 2024-01-26 16:18 | semperis.com | Original ↗ | .md | #active-directory | #credential-security | #defense

30.

Pass the Hash Attack Defense: AD Security 101

vulnerability | 2024-01-18 19:58 | semperis.com | Original ↗ | .md | #active-directory | #credential-theft | #ntlm