A weekly collection of news, op-ed analysis, tools and resources for cybersecurity practitioners. Curated and edited by Ryan Naraine and sent to your inbox every Monday morning.
03.01.2022 | 6'' read
Some notes on the data wiper malware discoveries at targets in Ukraine, cyberwar vendor marketing nonsense, and a China-linked APT discovery that raises eyebrows everywhere. Plus, must-see research projects...
Read02.22.2022 | 5'' read
An assortment of must-read pieces, including a Coinbase platforrm API security defect allowed people to sell bitcoins they didn't own. Truly "market-nuking" and worthy of the largest ever bug bounty paid by Coinbase ($250,000).
Read02.15.2022 | 5'' read
According to new data from Google Project Zero, big-tech vendors are getting better -- and faster -- at fixing high-risk security vulnerabilities. In 2021, vendors took an average of 52 days to fix security vulnerabilities reported from Project Zero. This is a significant acceleration from an average of about 80 days three years ago.
Read02.08.2022 | 6'' read
There's an interesting confluence of factors powering rare successes in the fight against ransomware. From .gov intervention to cyber-insurance renewals, Here are the four things helping to flatten the curve after the recent explosion of data-exfiltration/extortion attacks.
Read01.25.2022 | 4'' read
All the chatter about the 'great resignation' and labor shortage in cybersecurity touched off a series of conversations with CISOs on leadership, workplace culture, remote work pros-and-cons, and the tough decisions that must be made to slow the exodus of talent. These conversations have confirmed a very jarring reality: The skills shortage in cybersecurity will never be solved and here's why...
Read