‘Once-in-a-generation’ Log4j vulnerability could linger for a decade — cyber safety board
In its first-ever report for the Department of Homeland Security, a group of top government and industry cyber experts said the Log4j vulnerability triggered “one of the most intensive cybersecurity community responses in history” last December — and it’s far from over.
Lockdown Mode, mercenary hackers and Finland’s approach to hybrid war
Welcome to Changelog for 7/10/22, published by Synack! Blake here, back after a hiatus for the Fourth of July holiday.
Why Finland won’t flinch from Russian cyberthreats
Finland offers a model of how a Western democracy can harden its vital industries against cyberattacks while resisting hybrid conflict and information operations, but can other countries follow suit?
Deep-rooted firmware cyberthreats put defenders in a bind
Recent cyberthreats targeting firmware technology have underscored how tricky it is to weed out malware that can start wreaking havoc before infected computers even boot up.
Post-Roe data risks, BSides consequences and a Russia-Ukraine cyber update
Welcome to Changelog for 6/26/22, published by Synack. It’s me, Blake, back after a break for Juneteenth. Thank you to the R Street Institute for hosting me and four cybersecurity experts for a lively discussion Wednesday on the state of water sector cybersecurity. I hope it’s just the first of many successful events in the README and R Street Cyber Policy Talks series. Now, for the week’s news:
When security updates go wrong: Patch problems plague tech giants
Keeping software up to date is a mainstay of good cybersecurity hygiene. But in rare cases when patches backfire — either by introducing new, more severe software flaws or failing to fix the old ones — it can set off a scramble to set things right.
RSA recap, an Enigma machine and a warning on China-backed cyberthreats
We Synackers spent much of the time at Fogo de Chão hosting hundreds of guests, sponsors and a Journey cover band. When not at the, ahem, meat-and-greet in the restaurant, I made the quick walk to the Moscone Center to cover some RSA highlights:
A fresh Pwn2Own perspective, Cyber Command’s Ukraine revelation and some personal news
Welcome to Changelog for 6/5/22! It’s me, Blake, and I’m thrilled to announce I’m taking on a new role as editor-in-chief of README and head of communications here at Synack.
From programmer to pwner: My zero-day journey to Pwn2Own
Security researcher Vera Mens and her colleagues on Claroty’s Team82 took on some of the toughest challenges in the industrial cybersecurity field at Pwn2Own Miami.