Week in review

Week in review: PostgreSQL databases under attack, new Chrome zero-day actively exploited

August 25, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: PostgreSQL databases under attack Poorly protected PostgreSQL databases …

Week in review: MS Office flaw may leak NTLM hashes, malicious Chrome, Edge browser extensions

August 18, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200) A …

Week in review: Tips for starting your cybersecurity career, Patch Tuesday forecast

August 11, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: August 2024 Patch Tuesday forecast: Looking for a calm August release August …

Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users

August 4, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Why a strong patch management strategy is essential for reducing business …

Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI

July 28, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft releases tool to speed up recovery of systems borked by CrowdStrike …

Week in review: CrowdStrike update causes widespread IT outage, critical Splunk Enterprise flaw

July 21, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Faulty CrowdStrike update takes out Windows machines worldwide Hundreds of …

Week in review: RADIUS protocol critical vuln, Microsoft 0-day exploited for a year, AT&T breach

July 14, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Hackers stole call, text records of “nearly all” of AT&T’s cellular …

Week in review: A need for a DDoS response plan, human oversight in AI-enhanced software development

July 7, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 4 key steps to building an incident response plan In this Help Net Security …

Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets Androids

June 30, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, …

Week in review: CDK Global cyberattack, critical vCenter Server RCE fixed

June 23, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The rise of SaaS security teams In this Help Net Security interview, Hillary …

Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromised

June 16, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Users of JetBrains IDEs at risk of GitHub access token compromise …

Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecast

June 9, 2024

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683) If …