A weekly collection of news, op-ed analysis, tools and resources for cybersecurity practitioners. Curated and edited by Ryan Naraine and sent to your inbox every Monday morning.
03.23.2021 | 5'' read
Google published a remarkable report on a true apex APT actor that burned through 11 zero-days in less than a year, but the absence of basic information to help defenders leads to a dark hole of balkanized research output. Plus, Kim Zetter's new journalism project.
Read03.15.2021 | 5'' read
Chromium is a monoculture in browsers and the risks are being amplified via a surge in zero-day Chrome attacks. Have we learned enough from the lessons of the boll weevil? Plus, Microsoft's business ambitions are starting to clash with assurance realities.
Read03.08.2021 | 5'' read
So far this year, we've seen 14 distinct in-the-wild 0day attacks hitting a range of different platforms, products and operating systems. What does it all mean and how can we find some signs of good news amidst the carnage? Plus, a throwback podcast with a zero-day exploit merchant and lots of important people movements.
Read03.01.2021 | 5'' read
This week's newsletter looks at anti-malware scanning and zero-click attack roadblocks added to the latest Apple's platform security guide (updated Feb 2021), a wave of CISO movements, and some recommendations on reports you should already have read.
Read02.17.2021 | 2'' read
It's exciting to be reporting again, interviewing CISOs and hackers alike, filtering through the fluff to write the stories I've always wanted to read. Here are some quick notes on why I'm bullish on micro-journalism, podcasting and live streaming to cover the business of cybersecurity.
Read