Why Finland won’t flinch from Russian cyberthreats
Finland offers a model of how a Western democracy can harden its vital industries against cyberattacks while resisting hybrid conflict and information operations, but can other countries follow suit?
Deep-rooted firmware cyberthreats put defenders in a bind
Recent cyberthreats targeting firmware technology have underscored how tricky it is to weed out malware that can start wreaking havoc before infected computers even boot up.
Post-Roe data risks, BSides consequences and a Russia-Ukraine cyber update
Welcome to Changelog for 6/26/22, published by Synack. It’s me, Blake, back after a break for Juneteenth. Thank you to the R Street Institute for hosting me and four cybersecurity experts for a lively discussion Wednesday on the state of water sector cybersecurity. I hope it’s just the first of many successful events in the README and R Street Cyber Policy Talks series. Now, for the week’s news:
When security updates go wrong: Patch problems plague tech giants
Keeping software up to date is a mainstay of good cybersecurity hygiene. But in rare cases when patches backfire — either by introducing new, more severe software flaws or failing to fix the old ones — it can set off a scramble to set things right.
RSA recap, an Enigma machine and a warning on China-backed cyberthreats
We Synackers spent much of the time at Fogo de Chão hosting hundreds of guests, sponsors and a Journey cover band. When not at the, ahem, meat-and-greet in the restaurant, I made the quick walk to the Moscone Center to cover some RSA highlights:
A fresh Pwn2Own perspective, Cyber Command’s Ukraine revelation and some personal news
Welcome to Changelog for 6/5/22! It’s me, Blake, and I’m thrilled to announce I’m taking on a new role as editor-in-chief of README and head of communications here at Synack.
From programmer to pwner: My zero-day journey to Pwn2Own
Security researcher Vera Mens and her colleagues on Claroty’s Team82 took on some of the toughest challenges in the industrial cybersecurity field at Pwn2Own Miami.
How far can ‘good-faith’ hacking go? Experts question new DOJ guidance
The U.S. Justice Department last week softened its stance on prosecuting hackers under a decades-old law. Will the updates thaw DOJ’s relations with hacking communities famed for testing limits?
Updates to CFAA guidance, ransomware progress and problems with a Pentagon cyber push
Welcome to Changelog for 5/22/22, published by Synack! Blake here, struggling to beat the heat in Washington.