Resources
Polyfill Becomes a Supply-Chain Risk to 100,000 Websites
June 28, 2024 | A recent acquisition of the Polyfill domain by a Chinese company has turned it into a major supply-chain risk
14 Million OpenSSH Servers Exposed via Regression Flaw
July 1, 2024 | A critical remote code execution flaw (CVE-2024-6387) in OpenSSH on glibc-based Linux systems has been discove
Eldorado Ransomware Targets VMware ESXi
July 9, 2024 | A new ransomware-as-a-service platform, Eldorado, targets Windows and VMware ESXi environments.
What to Tell the Board About Malware Analysis
July 9, 2024 | Malware analysis is crucial for cybersecurity, helping security teams understand malicious software's behavior
Security Leaders Discuss Life360 Data Breach
July 2, 2024 | Life360 reported a data breach affecting its subsidiary, Tile, exposing client information such as names, phon
Microsoft Reveals AI Security Flaw That Threatens eCommerce and Financial Services
July 1, 2024 | Microsoft has discovered "Skeleton Key," a security flaw in AI models that can bypass ethical safeguards.
Buggy CrowdStrike EDR Update Crashes Windows Systems Worldwide
July 19, 2024 | A defective update to CrowdStrike Falcon Sensor caused mass IT outages globally, disrupting businesses, airli
Market Guide for Managed Detection and Response – Gartner Report
June 24, 2024 | Gartner's latest report emphasizes the critical shift to proactive cybersecurity.
2024 Gartner® MDR Market Guide | Managed Detection and Response Services
Getting Your Cybersecurity Career Started: Advice for Recent Tech Grads – DICE Insights
June 21, 2024 | Recent tech graduates face unique challenges and opportunities as they enter the cybersecurity workforce.
Phantom Secrets: The Hidden Threat in Code Repositories
July 1, 2024 | Aqua Security reveals that API tokens, credentials, and passkeys remain exposed in code repositories, even aft
Critical Vulnerability Bypassing Windows SmartScreen Shows Need for Layered Defenses
July 25, 2024 | A vulnerability in Microsoft's Windows SmartScreen, CVE-2024-21412, bypassed warning dialogues to deliver mal