Week in review

Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecast

May 11, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What a future without CVEs means for cyber defense For many cybersecurity …

Week in review: Critical SAP NetWeaver flaw exploited, RSAC 2025 Conference

May 4, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: RSAC 2025 Conference RSAC 2025 Conference took place at the Moscone Center in …

Week in review: MITRE ATT&CK v17.0 released, PoC for Erlang/OTP SSH bug is public

April 27, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs MITRE has …

Week in review: LLM package hallucinations harm supply chains, Nagios Log Server flaws fixed

April 20, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Apple plugs zero-day holes used in targeted iPhone attacks (CVE-2025-31200, …

Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixed

April 13, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824) …

Week in review: Probing activity on Palo Alto Networks GlobalProtect portals, Patch Tuesday forecast

April 6, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Attackers are probing Palo Alto Networks GlobalProtect portals Cybersecurity …

Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot

March 30, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft’s new AI agents take on phishing, patching, alert fatigue Microsoft …

Week in review: Veeam Backup & Replication RCE fixed, free file converter sites deliver malware

March 23, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Critical Veeam Backup & Replication RCE vulnerability fixed, patch ASAP! …

Week in review: NIST selects HQC for post-quantum encryption, 10 classic cybersecurity books

March 16, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: NIST selects HQC as backup algorithm for post-quantum encryption Last year, …

Week in review: How QR code attacks work and how to protect yourself, 10 must-reads for CISOs

March 9, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: How QR code attacks work and how to protect yourself While QR codes are …

Week in review: Botnet hits M365 accounts, PoC for Ivanti Endpoint Manager vulnerabilities released

March 2, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Massive botnet hits Microsoft 365 accounts A recently discovered botnet of …

Week in review: PostgreSQL 0-day exploited in US Treasury hack, top OSINT books to learn from

February 23, 2025

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094) …