You may use our vulnerability data with Splunk https:// splunkbase.splunk.com/app/4190/ # vuldb # splunk # logging

Use Splunk to fetch our vulnerability data very easily https:// splunkbase.splunk.com/app/4190/ # vuldb # splunk # logging

Our CTI team identifies elevated activities targeting products by Splunk https:// vuldb.com/vendor/splunk # splunk # vendor # cti # apt

I missed the Splunk vulns yesterday. Maybe worth a look for some of you. https:// advisory.splunk.com/advisories

Multiple critical software vulnerabilities disclosed in August 2026

Between 2026-08-20 and 2026-08-24, five critical vulnerabilities were disclosed across Splunk, EverShop, and GitLab, with CVSS scores of 9.1 to 9.4. A broader CVE report for 2026-08-17 listed 515 critical vulnerabilities published that week.

⚡We are thrilled to announce the addition of IrisQL and our IP feeds to the DomainTools App for Splunk and Splunk Enterprise! The app now includes a custom search command with IrisQL as a Search Proce

Anybody I know attending # Splunk .conf next week in Denver?

I'm here at Splunk .conf! Start the party. # splunkconf26

Thank you Arctiq for being a Gold sponsor of BSides Edmonton 2026. Visit them this month at our 9th annual event September 24–25, 2026. https:// arctiq.com # BSidesEdmonton # InformationSecurity

Thank you Arctiq for being a Gold sponsor of BSides Edmonton 2026. Visit them this month at our 9th annual event September 24–25, 2026.

オンプレミス環境でも「Splunk AI」が利用可能に エージェントのトークン支出見通しも予測可能 - EnterpriseZine:新着一覧 # enterprizine https:// enterprisezine.jp/news/detail/ 25135

オンプレミス環境でも「Splunk AI」が利用可能に エージェントのトークン支出見通しも予測可能 - EnterpriseZine:新着一覧 # enterprizine https:// enterprisezine.jp/news/detail/ 25135

Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect https:// packetstorm.news/news/view/428 32 # news

Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect https:// packetstorm.news/news/view/428 32 # news

Me right after getting pissed at Splunk and throwing some excessive regex in a query to make it feel something.

Atlassian and Splunk have patched 250+ vulnerabilities, including critical third-party flaws enabling RCE and DoS. These updates mitigate significant risks in widely used software stacks, requiring pr

f you're using any of those Monster A19 wifi lightbulbs (monsterilluminessence . com) be aware your data appears to be going to @splunk cloud.

Unrelated tech, geopolitics, and security fragments

Cluster mixes Fairphone Linux phone charging, Middle East defense pact, DOE nuclear projects, and RDP honeypot data with no single story. Reports span consumer hardware, international security, energy policy, and cybersecurity intelligence.

CISA's new BOD 26-04 sets a three-day patching deadline for Splunk Enterprise CVE-2026-20253, a CVSS 9.8 pre-auth RCE. Risk-based remediation timelines are now the https:// deafnews.it/en/article/cisa

Wave of cybersecurity vulnerabilities disclosed across platforms

Between August 6 and August 20, 2026, multiple critical security flaws were disclosed: the Clop extortion group exploited CVE-2026-12569 in PTC Windchill to steal engineering data; Microsoft patched CVE-2026-24301 affecting Copilot Personal; and a high-severity vulnerability (CVE-2026-0075) in Android's ContactsProvider was made public, affecting Android versions 14–16.

🚨 Critical Threat Intel: CVE-2023-49105 impacts ownCloud via improper authentication, enabling unauthenticated file access if signing-keys are missing. Review SIEM queries (Splunk, Sentinel, QRadar),

🚨 Critical Threat Intel: CVE-2022-0995 impacts the Linux kernel watch_queue subsystem via out-of-bounds memory writes, enabling local root privilege escalation. Review IOCs, Splunk/Sentinel queries,

CRITICAL CISA KEV ALERT: CVE-2026-84869 targets ConnectWise ScreenConnect with unauthorized file transfer and RCE. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar qu

CRITICAL CISA KEV ALERT: CVE-2026-84869 targets ConnectWise ScreenConnect with unauthorized file transfer and RCE. Active exploitation verified.

CRITICAL CISA KEV ALERT: CVE-2026-42018 targets JFrog Artifactory via improper auth and token leakage. Active exploitation verified. Access our CSUITE Brief for technical execution vectors, asset inte

CRITICAL CISA KEV ALERT: CVE-2026-42018 targets JFrog Artifactory via improper auth and token leakage. Active exploitation verified.

Mitigate CVE-2026-48710 in Starlette. Attackers exploit path injections in request headers to trigger auth bypasses. Access our T-Suite brief for Splunk, Sentinel, and Chronicle detection rules and ra

Mitigate CVE-2026-48710 in Starlette. Attackers exploit path injections in request headers to trigger auth bypasses.

In news parlance, we call what # Cisco / # Splunk did at # splunkconf26 "burying the lede." It was easy to miss a major change to its pricing amid all the hype around # agentic # observability (which

Multiple critical vulnerabilities published in CISA KEV catalog

CISA published six newly disclosed software vulnerabilities affecting LiteSpeed cPanel, Nx Console, TanStack, DD-WRT, Check Point SmartConsole, and Microsoft SharePoint, ranging from privilege escalation to remote code execution. These CVEs pose significant security risks to enterprise and open-source users.

Having a great time at Splunk .conf. I've had so many great conversations and learned a lot. My phone is full of pictures of slides and notes from the sessions. Glad I was able to make it out here! ☺️

⏳ Last call: the DFIR Labs Digital Forensics Challenge kicks off tomorrow. 4 hours, one real intrusion, 20+ questions, live support in our Discord, and a shot at joining The DFIR Report as a volunteer

Information security conference event sponsor announcements

Between September 24–25, 2026, an infosec conference acknowledged its sponsors across multiple tier levels (Platinum: Cisco, Veeam; Gold, Silver, Bronze sponsors) and concluded with CTF competition results. Posts were event housekeeping, not news.

🧩 The DFIR Labs Digital Forensics Challenge is a solo event, but teams are welcome too. One real intrusion, 4 hours in Splunk or Elastic, 20+ questions from beginner to expert, with live support in o

Some RomHack Camp 2026 workshops need advance registration — trainers prep the labs per attendee. Book from Monday 28 September, 11:00 (CEST): 🤖 Agentic SOAR with n8n + Splunk 🐉 Cobalt Strike (Fortr

Cyber Centre Daily Digest: 5 Advisories (2026-08-21)

300 Char Blurb for Social Media: 🚨 Threat Intel: CVE-2026-66384 impacts JFrog Artifactory via path traversal, allowing authenticated file writes outside Docker caches. Review path detection queries,

Vector: Open Source Alternative to DataDog, Splunk and Cribl Stream

Intel CEO Lip-Bu Tan says the AI boom has a 2028 problem, and his customers feel it

Hmm, reading about Raku regexes and it feels like some strong tradeoffs. On the one hand, sounds like they are a huge upgrade over Perl regexes. On the other hand, Perl regexes are hard enough to writ

💬 "The best single-player blue team CTF I've ever participated in, and I learned a lot while playing." a past participant The DFIR Labs Digital Forensics Challenge is back: one real intrusion, 20+ qu

🏢 Want in on the DFIR Labs Digital Forensics Challenge? Have your company sponsor you. It's a solo event, but under the business option a top-5 finish features your company name and your persona, rec

Meet keynote speaker James Brodsky, VP of Security Solutions Engineering, AMER at SentinelOne. James leads technical strategy, field enablement, and customer engagement across the region and brings de

Mixed reports: health partnership, AI security, weather, and labor

Eight unrelated items spanning April 2024 to November 2026: WHO partnership meetings with Netherlands and Spain, a research paper on LLM agent security, a weather alert, congressional bill tracking, FCC rulemaking, and an AI labor-market report. No coherent single story.

Mixed reports: Trump White House costs, tariffs, weather, Buddhism, AI jobs

Cluster contains unrelated fragments: Trump administration spending on White House renovations and tariff policy; Alaska flood alerts; religious studies post; and AI labor market research. No single story connects these reports.

SkillBloat: Token Amplification Attacks via Skill Injection in LLM Coding Agents

21929v1 Announce Type: new Abstract: Agent skills extend coding agents with task-specific instructions, scripts, and resources, but they also create a trusted instruction channel that can be abused beyond conventional security attacks. This paper studies token amplification through skill injection: an economic resource-abuse threat in which a malicious skill causes an agent to consume substantially more tokens than needed for normal task execution.