Week in review

Week in review: Kubernetes security challenges, NIST Privacy Framework, Mitsubishi Electric breach
Here’s an overview of some of last week’s most interesting news and articles: Mitsubishi Electric discloses data breach, possible data leak Japanese multinational …

Week in review: Windows crypto flaw, API security risks, exploits for Citrix security hole abound
Here’s an overview of some of last week’s most interesting news and articles: Cable Haunt: Unknown millions of Broadcom-based cable modems open to hijacking A …

Week in review: Citrix bug under attack, Windows 7 ransomware risk, ATT&CK for ICS
Here’s an overview of some of last week’s most interesting news and articles: Travelex extorted by ransomware gang, services still offline a week after the hit On …

Week in review: Worst passwords of 2019, the end of Windows 7, 2020 cybersecurity trends
Here’s an overview of some of last week’s most interesting news and articles: Worst passwords of 2019: Are you using one of them? SplashData released their “Worst …

Week in review: AD password reset best practices, new issue of (IN)SECURE
Here’s an overview of some of last week’s most interesting news and articles: DNS over HTTPS’ threat to enterprise security DNS over HTTPS (DoH) is here, …

Week in review: 5G IoT security, efficient password cracking for pentesters, supply chain examination
Here’s an overview of some of last week’s most interesting news and articles: 5G IoT security: Opportunity comes with risks Slowly but surely, 5G digital cellular …

Week in review: The data skills gap, new Kali Linux release, Apache Solr RCEs with public PoCs
Here’s an overview of some of last week’s most interesting news and articles: The overlooked part of an infosec strategy: Cyber insurance underwriting When a data …

Week in review: Public cloud performance, new G Suite security options, how to build a successful SOC?
Here’s an overview of some of last week’s most interesting news, articles and podcasts: Women in cybersecurity can benefit from taking inventory of their personal …

Week in review: How to avoid lateral phishing, what’s the right time to red team?
Here’s an overview of some of last week’s most interesting news and articles: Your supplier’s BEC problem is your BEC problem BEC scammers don’t care what business …

Week in review: Active Directory security, Patch Tuesday forecast, stopping lateral phishing attacks
Here’s an overview of some of last week’s most interesting news, interviews and podcasts: How can security teams effectively monitor OT and ICS networks? Modern …

Week in review: Keeping up with ransomware, critical PHP RCE exploited, DevOps firewall
Here’s an overview of some of last week’s most interesting news and articles: Leading domain name registrars suffered data breach Web technology company Web.com …

Week in review: Avast breach, deepfakes, VisibleV8 monitors JavaScript in the wild
Here’s an overview of some of last week’s most interesting news and articles: Phishing attacks are a complex problem that requires layered solutions Most cyber …
Featured news
Resources
Don't miss
- Threat actors are scanning your environment, even if you’re not
- GoSearch: Open-source OSINT tool for uncovering digital footprints
- Rack Ruby vulnerability could reveal secrets to attackers (CVE-2025-27610)
- Top must-visit companies at RSAC 2025
- Critical Commvault RCE vulnerability fixed, PoC available (CVE-2025-34028)