A weekly collection of news, op-ed analysis, tools and resources for cybersecurity practitioners. Curated and edited by Ryan Naraine and sent to your inbox every Monday morning.
07.27.2021 | 8'' read
As far as we've come, it feels like we're chasing a tail that's disappearing in the distance. Attack surfaces are expanding faster than we can react to securing them and there's still too much friction when users try to adopt the best available security tools.
Read07.20.2021 | 8'' read
Israeli vendors Candiru and NSO Group are caught in the crosshairs of global investigations into the secretive world of zero-days and point-and-click mobile hacking tools to .gov customers. Plus, the fallout from China's clampdown on vulnerability data sharing.
Read07.14.2021 | 5'' read
After years and years of spending billions of dollars on cybersecurity, here we are, on a zero-day patching treadmill while ransomware infections soar and vendors boast of successful IPOs and expanding revenue streams. So much is wrong.
Read07.06.2021 | 4'' read
While Microsoft Windows fleet admins scramble to apply the 'PrintNightmare' patch, the evidence is clear that Microsoft has a severe patch-quality problem that's now being compounded by poor communications, lack of transparency, and festering feuds with prominent white-hat hackers.
Read06.30.2021 | 7'' read
Microsoft misdiagnoses the severity of a Print Spooler security update, calling into question the quality of the company's patches. Plus, some movement on defining "critical software" and advances in SBOM requirements.
Read