https://cybersecuritytracker.ai/?cats=researchCurated cybersecurity news and vulnerability intelligence.Sun, 26 Jul 2026 22:32:50 GMThttps://helpnetsecurity.com/2026/07/23/cobalt-adds-autonomous-pentest-to-scale-application-security-testingcst-3092Cobalt has launched an automated penetration testing service that provides results within 24 hours to help organizations test applications continuously rather than on traditional quarterly or monthly schedules. The offering addresses the challenge of expanding attack surfaces and growing adoption of AI by both defenders and attackers.Thu, 23 Jul 2026 12:54:14 GMThttps://ncsc.gov.uk/blogs/post-quantum-cryptography-pqc-migration-workshop-reportcst-2994The article discusses findings from a workshop focused on post-quantum cryptography (PQC) migration, highlighting that organizations cannot successfully execute this transition independently. The report emphasizes collaborative approaches and shared insights needed for managing the shift to quantum-resistant cryptographic standards.Wed, 22 Jul 2026 12:00:00 GMThttps://schneier.com/blog/archives/2026/07/mit-to-become-hotbed-of-ai-video-surveillance.htmlcst-2913MIT is installing over 500 AI-equipped surveillance cameras across campus buildings, residence halls, and outdoor areas between November 2025 and September 2026, with a budget exceeding $3 million. The cameras use deep learning to perform real-time facial recognition, object classification, and behavioral detection including motion, loitering, and crowd identification. Collected data is retained for up to 30 days unless an exception applies.Tue, 21 Jul 2026 11:07:13 GMThttps://cyberscoop.com/world-cup-2026-major-event-cybersecurity-resilience-op-edcst-2893The World Cup concluded without reported major cyber disruptions, though the FBI warned of fraudulent websites impersonating FIFA during the tournament. The absence of headline-grabbing breaches reflects months of planning, coordination, and information sharing across governments, venues, payment systems, and law enforcement agencies working as an integrated ecosystem. Successful resilience depends on pre-event relationship-building, clear roles, shared intelligence, and response protocols that extend beyond traditional stadium perimeters to include vendors, ticketing platforms, transportation, and operational technology systems.Tue, 21 Jul 2026 10:00:00 GMThttps://helpnetsecurity.com/2026/07/21/first-pr3tack-preemptive-frameworkcst-2880PR3TACK is an open framework developed by an Atlassian security researcher that catalogs plausible attacker tactics, techniques, and procedures before they appear in the wild. The framework addresses the gap between when attackers develop new methods and when defenders detect and respond to them. Unlike traditional defensive models that document observed attacks, PR3TACK proactively maps potential threat techniques to enable earlier detection and mitigation.Tue, 21 Jul 2026 04:59:51 GMThttps://helpnetsecurity.com/2026/07/20/microsoft-dusseldorf-out-of-band-application-security-testing-oast-platformcst-2809Microsoft has released Dusseldorf, an open-source out-of-band application security testing platform designed to run in private environments. The tool captures inbound network traffic across multiple protocols and enables automated response crafting for validation workflows, addressing infrastructure gaps researchers typically build themselves when testing for out-of-band vulnerabilities.Mon, 20 Jul 2026 06:00:36 GMThttps://schneier.com/blog/archives/2026/07/details-of-alan-turings-voice-encryption-system.htmlcst-2764In November 2023, a collection of Alan Turing's wartime papers sold at auction in London for approximately half a million US dollars. The cache, known as the Bayley papers, includes handwritten materials documenting Turing's classified Delilah project from 1943 to 1945, a portable voice-encryption system. The papers survived because Donald Bayley, a colleague who worked with Turing, preserved them until his death in 2020.Fri, 17 Jul 2026 11:02:21 GMThttps://helpnetsecurity.com/2026/07/17/hard-drive-reliability-2026-4tb-20tbcst-2742Backblaze released a Q1 2026 reliability report covering 341,263 hard drives ranging from 4TB to over 20TB capacity in its cloud storage fleet. The analysis tracks real-world failure rates across a diverse range of drive sizes operating in continuous-use conditions, excluding boot drives and units below reporting thresholds.Fri, 17 Jul 2026 04:30:17 GMThttps://unit42.paloaltonetworks.com/ai-incident-response-reportcst-2733Unit 42 has published a 2026 Global Incident Response Report examining how AI and automation are shaping cybersecurity threats and incident response practices. The report synthesizes observations from the team's incident response engagements throughout the year.Thu, 16 Jul 2026 23:00:59 GMThttps://techcrunch.com/2026/07/16/period-tracker-stardust-shares-users-health-data-with-analytics-firm-says-mozilla-researchcst-2713Mozilla research on period tracker applications revealed significant privacy disparities among tested apps, with one application sharing users' health data with an analytics firm while another demonstrated strong privacy protections. The findings highlight inconsistent data handling practices in the period tracking app ecosystem.Thu, 16 Jul 2026 15:33:28 GMThttps://helpnetsecurity.com/2026/07/16/open-source-projects-funding-impactcst-2647Open-source software comprises approximately 96 percent of enterprise codebases, yet most of it is maintained by unpaid volunteers. Recent supply chain incidents like the log4j vulnerability in December 2021 and the xz utils backdoor in 2024 have highlighted the risks of relying on under-resourced projects. The article examines how public funding affects open-source project sustainability and security.Thu, 16 Jul 2026 05:30:58 GMThttps://schneier.com/blog/archives/2026/07/a-video-screen-that-is-also-a-camera.htmlcst-2591Researchers at ETH Zurich developed a pixel technology called a Fourier pixel that can simultaneously display video and capture images by manipulating light intensity, phase, and polarization. The innovation, published in Nature, enables pixels to function as both emitters and sensors in a single component. This advancement moves toward dual-purpose display and camera systems in a single device.Wed, 15 Jul 2026 11:04:06 GMThttps://isc.sans.edu/diary/rss/33156cst-2542DShield SIEM received an update in September 2025 that added TTY log collection and Suricata integration to its monitoring capabilities. The system now uses ELK stack version 8.19.15 and includes additional dashboards that allow security practitioners to review command activity on DShield sensors, with logs parsed and uploaded daily and cross-linked across visualizations.Wed, 15 Jul 2026 01:38:43 GMThttps://helpnetsecurity.com/2026/07/14/tines-network-operations-management-guidecst-2485A downloadable guide discusses challenges in modern network operations management, highlighting manual processes, growing complexity, and operational inefficiencies. The resource explores how intelligent workflows can reduce manual work, improve visibility, and accelerate response across network operations teams.Tue, 14 Jul 2026 13:00:55 GMThttps://thehackernews.com/2026/07/study-of-85-crypto-wallet-extensions.htmlcst-2477Researchers at KU Leuven analyzed 85 popular cryptocurrency wallet browser extensions and identified privacy vulnerabilities that allow address linking and cross-site tracking. The wallet communication patterns with websites and blockchain servers expose user activity in ways that enable deanonymization and user tracking across sites.Tue, 14 Jul 2026 11:55:00 GMThttps://helpnetsecurity.com/2026/07/14/iot-smart-home-security-researchcst-2459Researchers are developing synthetic smart home usage data to supplement real-world recordings for security testing, potentially accelerating research by reducing the need for costly, invasive monitoring of actual homes. The approach creates artificial resident profiles and behaviors to generate larger and more diverse datasets that reflect varied household patterns.Tue, 14 Jul 2026 05:30:26 GMThttps://huntress.com/blog/system-hardening-checklistcst-2428A Huntress guide presents a checklist and best practices for system hardening to reduce vulnerabilities that threat actors can exploit. The resource covers practical steps to secure computing environments and address common security gaps.Fri, 10 Jul 2026 13:00:00 GMThttps://thehackernews.com/2026/07/from-17000-to-11-million-assets-how.htmlcst-2320Lumen Technologies expanded its asset inventory from 17,000 to 1.1 million assets by consolidating and improving exposure management capabilities. The article references survey data showing that only 45 percent of organizations consolidate asset and exposure data into a single view, and notes that inaccurate inventories cascade through downstream security programs.Fri, 10 Jul 2026 11:39:40 GMThttps://schneier.com/blog/archives/2026/07/ai-surveillance-and-social-progress.htmlcst-2316AI-powered surveillance systems combining facial recognition, real-time tracking, and automated enforcement are being deployed globally to monitor public behavior and issue immediate sanctions for rule violations. China operates over 600 million surveillance cameras integrated with social credit systems that publicly shame and restrict citizens deemed untrustworthy, while similar systems are being tested in North America, Europe, and other regions. The technology's primary impact may be widespread self-censorship and behavioral conformity rather than objective public safety.Fri, 10 Jul 2026 11:02:04 GMThttps://thehackernews.com/2026/07/study-of-281-free-android-vpn-apps.htmlcst-2322Researchers tested 281 popular free Android VPN apps and found basic security failures in many, including traffic leaks, unencrypted data handling, and user tracking. The affected apps have been installed over 2.4 billion times. The vulnerabilities identified represent fundamental failures of VPN functionality rather than sophisticated attacks.Fri, 10 Jul 2026 10:56:23 GMThttps://helpnetsecurity.com/2026/07/10/open-source-software-library-typescst-2301A new research paper examines how open source libraries vary dramatically in their maintenance models and governance, from well-resourced projects to those maintained by a single person in spare time. Despite carrying the same label, these differences can significantly affect the behavior and security posture of software that depends on them.Fri, 10 Jul 2026 07:00:16 GMThttps://wiz.io/blog/verizon-dbir-2026-ai-cloud-securitycst-2276Verizon's Data Breach Investigations Report (DBIR) examines how attackers exploit common weaknesses with accelerating speed and scale. Wiz research contributes insights on vulnerabilities, trust relationships, and artificial intelligence (AI) in cloud environments. The analysis suggests that AI adoption and cloud expansion are reshaping the threat landscape for defenders.Thu, 09 Jul 2026 16:18:49 GMThttps://schneier.com/blog/archives/2026/07/the-language-of-ai-could-change-how-humans-speak.htmlcst-2248Large language models trained primarily on written text and scripted speech may influence how humans communicate by introducing linguistic patterns like shorter sentences, reduced vocabulary range, and formulaic responses that differ from natural conversation. As AI-generated content becomes more prevalent and AI systems increasingly train on text produced by other AI systems, these patterns could reshape human speech patterns, potentially narrowing vocabulary use, introducing confirmation bias, and eroding conversational norms like courtesy.Thu, 09 Jul 2026 11:00:45 GMThttps://darkreading.com/cybersecurity-operations/european-organizations-collaboration-security-confidence-gapcst-2230A survey of European security leaders reveals a mismatch between their perceived security posture and actual risks in collaboration tools and platforms. The findings suggest many organizations are overconfident about the protection of their collaborative environments despite underlying vulnerabilities.Thu, 09 Jul 2026 08:00:00 GMThttps://helpnetsecurity.com/2026/07/09/github-open-source-collaborationcst-2218GitHub reports that cross-border open-source collaboration grew 16% from Q4 2025 to Q1 2026, with developers increasingly contributing code and pull requests to public repositories internationally. This marks the second-highest quarter-over-quarter growth since 2020, approaching the surge seen in Q2 2020. The trend is placing mounting pressure on open-source project maintainers.Thu, 09 Jul 2026 05:10:05 GMThttps://isc.sans.edu/diary/rss/33138cst-2146A security researcher has created a stack simulator tool to help students visualize how the stack memory region works during program execution, particularly for malware analysis students learning assembly language. The simulator allows users to select architecture, choose predefined instruction sets, step through code execution, and observe real-time changes to the stack and registers similar to a debugger interface.Wed, 08 Jul 2026 08:09:03 GMThttps://helpnetsecurity.com/2026/07/08/20-latest-open-source-cybersecurity-toolscst-2131An article highlighting 20 open-source cybersecurity tools that address emerging security needs, including vulnerability research, application security testing, container security, endpoint protection, AI security, and penetration testing. The roundup emphasizes how AI is changing security workflows and includes examples like AIMap, a tool for discovering and testing exposed AI endpoints.Wed, 08 Jul 2026 05:30:52 GMThttps://helpnetsecurity.com/2026/07/08/picus-continuous-offensive-security-testing-programcst-2133Continuous offensive security testing addresses the limitation of point-in-time penetration tests, which become outdated as environments change and controls drift. The article discusses the challenge of deciding how to remediate findings and maintaining confidence in those decisions over time as security postures evolve.Wed, 08 Jul 2026 04:30:31 GMThttps://schneier.com/blog/archives/2026/07/google-is-suing-chinese-scammers-who-are-using-gemini.htmlcst-529Google filed a lawsuit against Outsider Enterprise, a Chinese scam operation that uses Telegram to offer phishing-as-a-service. The group provided instructions on leveraging Google's Gemini AI to create fraudulent websites mimicking Google, YouTube, and government agencies like New York's E-ZPass, with nearly 300 scam templates available. Google coordinated with major carriers to block malicious text messages and notes that its on-device scam detection in Google Messages blocks approximately 10 billion spam texts monthly.Tue, 07 Jul 2026 10:43:40 GMThttps://huntress.com/blog/cybersecurity-lessons-taylor-swift-weddingcst-2290This article draws cybersecurity lessons from Taylor Swift and Travis Kelce's wedding, discussing concepts like layered defense and multifactor authentication (MFA) through the lens of event security.Tue, 07 Jul 2026 07:00:00 GMThttps://sophos.com/en-us/blog/2607_agents_vs_telemetrycst-2085An X-Ops analysis examines how artificial intelligence (AI) coding agents trigger endpoint detection and response (EDR) rules that were originally designed to catch adversarial activity. The research highlights potential blind spots in security monitoring systems when legitimate AI tools behave similarly to malicious actors.Tue, 07 Jul 2026 00:00:00 GMThttps://isc.sans.edu/diary/rss/33124cst-156RCS (Rich Communication Services) is increasingly used on modern iOS and Android devices as a potential replacement for SMS, featuring optional end-to-end encryption and digital signing. The article explains how NAPTR (Naming Authority Pointer) DNS records, defined in RFC 2915, are being used to locate RCS servers by enabling clients to discover SIP-based service endpoints rather than just IP addresses.Mon, 06 Jul 2026 13:35:58 GMThttps://isc.sans.edu/diary/rss/33122cst-157The article is an ISC Stormcast podcast episode from July 6th, 2026. No substantive content was provided in the source material to summarize.Mon, 06 Jul 2026 11:36:06 GMThttps://schneier.com/blog/archives/2026/07/france-to-stop-certifying-non-quantum-safe-encryption.htmlcst-412France's cybersecurity agency ANSSI announced it will cease certifying security products lacking quantum-resistant encryption starting in 2027, with a recommendation that businesses adopt quantum-safe products by 2030. This policy applies to French government agencies and critical infrastructure operators, effectively mandating a transition from legacy encryption systems.Mon, 06 Jul 2026 10:45:44 GMThttps://schneier.com/blog/archives/2026/07/cybersecurity-mission-creep-in-the-us.htmlcst-414A legal analysis examines how policymakers increasingly frame diverse policy issues, including misinformation, content moderation, antitrust, and anti-trafficking efforts, as cybersecurity problems. This reframing grants these issues an aura of urgency and existential threat, potentially bypassing normal deliberation and deferring to expert-driven solutions that may oversimplify underlying problems and reduce governance transparency.Thu, 02 Jul 2026 11:11:44 GMThttps://recordedfuture.com/blog/gartner-mq-announcement-jpcst-2613Recorded Future was named a Leader in Gartner's Magic Quadrant for Cyber Threat Intelligence Technology, evaluated among 17 vendors in a comprehensive analysis of market trends and vendor positioning.Thu, 02 Jul 2026 00:00:00 GMThttps://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.htmlcst-50A Bitdefender survey of 1,200 IT and cybersecurity professionals reveals a disconnect between organizations' awareness of cyber risk and their ability to translate that awareness into operational resilience. The 2026 Cybersecurity Assessment highlights contradictions in how organizations understand and respond to cybersecurity challenges.Wed, 01 Jul 2026 11:30:00 GMThttps://schneier.com/blog/archives/2026/07/papa-johns-surveillance-based-advertising.htmlcst-415Papa Johns partnered with NBCUniversal, Instacart, and Carat to create targeted advertising based on grocery purchasing patterns, identifying consumers likely running low on food staples and serving them pizza ads on streaming platforms. The campaign used custom audience data from Instacart shoppers to predict when individuals would need food, with ads tailored to buying behavior and featuring calls to action like "Light on groceries?" The effort aims to reach consumers at moments of high purchase intent while maintaining plausible deniability about the surveillance element.Wed, 01 Jul 2026 10:53:23 GMThttps://schneier.com/blog/archives/2026/06/the-realities-of-ai-video-surveillance.htmlcst-416Artificial intelligence is expanding video surveillance capabilities by enabling natural language queries on video footage, allowing analysts to search for specific behaviors and patterns across massive video streams. Instead of using preset search categories, intelligence and law enforcement agencies can now ask open-ended questions about video content, such as identifying individuals with changed appearances, suspicious object exchanges, or vehicles with specific movement patterns. This shift from object-based to behavior-based surveillance represents a significant escalation in monitoring capabilities.Tue, 30 Jun 2026 12:05:57 GMThttps://schneier.com/blog/archives/2026/06/factoring-rsa-keys-with-many-zeros.htmlcst-417Researchers discovered a new class of weak RSA keys characterized by regularly spaced blocks of zeros in their moduli, found in real-world deployments including expired certificates for Yahoo and Verizon, and SSH hosts running CompleteFTP software. The CompleteFTP vulnerability affects RSA keys generated in versions 10.0.0 through 12.0.0 and DSA keys up to version 23.0.4, with cryptanalytic algorithms potentially tailored to exploit this specific weakness. The findings suggest independent implementations failed similarly, raising questions about whether additional cryptographic products contain comparable flaws.Mon, 29 Jun 2026 16:05:18 GMThttps://isc.sans.edu/diary/rss/33110cst-160A security practitioner describes automating the process of discovering in-scope hosts during penetration testing by extracting favicon.ico file hashes and querying Shodan's API to find other hosts sharing the same icon. The workflow uses command-line tools to hash favicons, search Shodan, parse JSON results with jq, and generate a clean list of hostnames suitable for further reconnaissance activities like network scanning.Mon, 29 Jun 2026 12:00:54 GMThttps://schneier.com/blog/archives/2026/06/robot-police-officers.htmlcst-418The Sacramento County Sheriff's Office successfully used a drone equipped with a high-powered magnet to disarm a suspect and retrieve a knife during a standoff in June. The suspect had refused to respond to negotiators and was hiding in a garage when the drone located and extracted the weapon. The operation demonstrates emerging tactical applications for unmanned systems in law enforcement scenarios.Mon, 29 Jun 2026 10:55:33 GMThttps://schneier.com/blog/archives/2026/06/the-chinese-control-the-majority-of-argentinas-squid-fleet.htmlcst-419Chinese companies own and operate nearly two-thirds of Argentina's squid fishing fleet, giving them substantial control over the country's squid industry and marine resources.Fri, 26 Jun 2026 20:57:04 GMThttps://schneier.com/blog/archives/2026/06/meta-is-testing-facial-recognition-for-police-and-military.htmlcst-420Meta is developing facial recognition technology for use by law enforcement and military agencies, with prototyping work involving a Pentagon supplier. The technology would enable real-time identification capabilities, similar to systems that U.S. Immigration and Customs Enforcement (ICE) has sought to deploy.Fri, 26 Jun 2026 16:40:56 GMThttps://darkreading.com/application-security/initiative-tackles-security-end-of-life-open-sourcecst-101The Open Source Sustainability Initiative aims to help enterprises manage security and compliance for aging open source projects that have reached end of life. The initiative addresses the challenge of maintaining vulnerable legacy code while meeting regulatory requirements.Fri, 26 Jun 2026 16:32:30 GMThttps://schneier.com/blog/archives/2026/06/one-million-passports-leaked-online.htmlcst-421A database containing nearly one million passports was exposed online after being compromised from an identity verification system used by cannabis dispensaries. The incident highlights how high-value credentials like passports were leveraged in a lower-security authentication system, creating a significant security risk.Fri, 26 Jun 2026 11:03:21 GMThttps://blog.talosintelligence.com/close-encounters-of-the-human-kindcst-353The article is primarily a philosophical commentary on human decision-making and information processing in cybersecurity contexts, using a Spielberg film as a framing device. It argues that knowing what security controls to implement (patching, MFA, segmentation, backups) is easier than actually executing them due to competing priorities and resource constraints. The piece includes a brief technical note about Cisco Talos presenting a new reverse engineering approach that integrates AI agents with traditional disassembly tools through a COM interface to automate analysis workflows locally.Thu, 18 Jun 2026 18:00:24 GMThttps://blog.talosintelligence.com/scripting-the-disassemblercst-354A research blog describes how to enable agentic reverse engineering by exposing a disassembler's internal object model through COM scripting interfaces rather than embedding AI features directly. vbdec, a Visual Basic 6 decompiler, publishes its parsed binary data through the Windows Running Object Table (ROT) and provides AI agent documentation and type definitions, allowing local large language model instances to automate analysis tasks through script-based queries. This approach keeps analyst data local while enabling AI agents to iteratively explore and report on binary structures without modifying the core application or uploading samples.Thu, 18 Jun 2026 10:00:05 GMThttps://huntress.com/blog/key-takeaways-gartner-security-risk-summitcst-676Gartner Security & Risk Management Summit 2026 highlighted three major themes: resilience, identity, and practical artificial intelligence (AI) applications. The article identifies five key takeaways for security leaders to consider.Tue, 09 Jun 2026 07:00:00 GMThttps://wiz.io/blog/state-of-post-quantum-cryptographycst-1270This story discusses post-quantum cryptography (PQC) adoption trends and statistics based on customer data and other sources. It provides insights into current PQC implementation rates and readiness levels across organizations.Thu, 28 May 2026 13:34:55 GMT