Latest News
A new multi-purpose backdoor recently discovered by Microsoft marks a dangerous shift toward unified cyber-attack frameworks. The backdoor, tracked as GigaWiper, is…
A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a…
The US Cybersecurity and Infrastructure Security Agency (CISA) has detailed its response to internal CISA Amazon AWS GovCloud Keys and other information being made…
Your inbox is an identity system all of its own: whoever owns it may own a lot more Email is not just…
The US National Association of Insurance Commissioners (NAIC) has suffered a security breach that has exposed US citizens’ credit rating data. The…
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still…
It’s Monday again. This week’s threat list looks painfully familiar: abused integrations, fake tools, poisoned websites, ransomware crews trying to shut down…