Week in review

Week in review: LLM package hallucinations harm supply chains, Nagios Log Server flaws fixed

April 20, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Apple plugs zero-day holes used in targeted iPhone attacks (CVE-2025-31200, …

Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixed

April 13, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824) …

Week in review: Probing activity on Palo Alto Networks GlobalProtect portals, Patch Tuesday forecast

April 6, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Attackers are probing Palo Alto Networks GlobalProtect portals Cybersecurity …

Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot

March 30, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft’s new AI agents take on phishing, patching, alert fatigue Microsoft …

Week in review: Veeam Backup & Replication RCE fixed, free file converter sites deliver malware

March 23, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Critical Veeam Backup & Replication RCE vulnerability fixed, patch ASAP! …

Week in review: NIST selects HQC for post-quantum encryption, 10 classic cybersecurity books

March 16, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: NIST selects HQC as backup algorithm for post-quantum encryption Last year, …

Week in review: How QR code attacks work and how to protect yourself, 10 must-reads for CISOs

March 9, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: How QR code attacks work and how to protect yourself While QR codes are …

Week in review: Botnet hits M365 accounts, PoC for Ivanti Endpoint Manager vulnerabilities released

March 2, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Massive botnet hits Microsoft 365 accounts A recently discovered botnet of …

Week in review: PostgreSQL 0-day exploited in US Treasury hack, top OSINT books to learn from

February 23, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094) …

Week in review: Microsoft fixes two actively exploited 0-days, PAN-OS auth bypass hole plugged

February 16, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes two actively exploited zero-days (CVE-2025-21418, …

Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google Play

February 9, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Russian cybercrooks exploiting 7-Zip zero-day vulnerability (CVE-2025-0411) …

Week in review: Apple 0-day used to target iPhones, DeepSeek’s popularity exploited by scammers

February 2, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Apple zero-day vulnerability exploited to target iPhone users …