CISO Strategy
Closed CISO communities act as an information exchange, advice center, pressure valve, and safe haven from critical oversight.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Data Breaches
SoundCloud said the information of 20% of users was accessed by hackers who breached its systems.
Vulnerabilities
Threat actors are exploiting the two critical authentication bypass vulnerabilities against FortiGate appliances.
Data Breaches
Hackers stole names, addresses, dates of birth, and Social Security numbers from the credit report and identity verification services provider.
Vulnerabilities
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
Malware & Threats
Notepad++ found a vulnerability in the way the software updater authenticates update files.
Artificial Intelligence
Members of Congress from both parties have pushed for more regulations on AI, saying there is not enough oversight for the powerful technology.
Vulnerabilities
The Chrome zero-day does not have a CVE and it's unclear who reported it and which browser component it affects.
Endpoint Security
The PCIe flaws, found by Intel employees, can be exploited for information disclosure, escalation of privilege, or DoS.
Vulnerabilities
Microsoft has addressed a Windows vulnerability exploited as zero-day that allows attackers to obtain System privileges.
Tracking & Law Enforcement
The US seeks information on the leader of Emennet Pasargad, Mohammad Bagher Shirinkar, and long-time employee Fatemeh Sedighian Kashi.
CISO Conversations
From a basement computer lab to the C-Suite: How Keith McCammon built his career and Red Canary with zero formal training.
Vulnerabilities
An increasing number of threat actors have been attempting to exploit the React vulnerability CVE-2025-55182 in their attacks.
Incident Response
The critical React vulnerability has been exploited in the wild by Chinese and other threat actors.
Vulnerabilities
AWS has seen multiple China-linked threat groups attempting to exploit the React vulnerability CVE-2025-55182.
Application Security
A researcher has pointed out that only instances using a newer feature are impacted by CVE-2025-55182.
Endpoint Security
Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.
Mobile & Wireless
Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks.
Identity & Access
Two technologies — one for public safety, one for controlled entry — show why trust in facial recognition must be earned, not assumed.
ICS/OT
CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
