Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Friday Squid Blogging: Searching for the Colossal Squid (Schneier on Security)
Fascinating video about searching for life undersea. The video basically makes the point that our bright white searchlights are scaring everything away, and that red light is more neutral. That, plus bait to attract sea creatures, is teachi - Upcoming Speaking Engagements (Schneier on Security)
This is a current list of where and when I am scheduled to speak: I’m speaking, signing books, and participating in panel discussions at LAcon V in Anaheim, California, USA. My full schedule is here . I’m speaking online (via Zoom) at a Lea - Who’s Tracking You? Use This New Service to Find Out (KrebsOnSecurity)
It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditional - Attackers Exploit SharePoint Authentication Bypass After Public PoC Release (The Hacker News)
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical s - Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor (The Hacker News)
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace compa
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →