CISA reverses course, extends MITRE CVE contract
In a last-minute switch, the Cybersecurity and Infrastructure Security Agency said it will continue funding a contract for MITRE to manage the CVE program and…
Month: April 2025
Google begins unifying search country domains to Google.com
Google has announced that it’s retiring separate country code top-level domain names for search, like google.co.uk or google.com.br, and unifying them under Google.com. Previously, Google…
The Looming Shadow Over AI: Securing the Future of Large Language Models
These days Large Language Models (LLMs) are nothing short of revolutionary, though they have been around since 1996 (ELIZA, developed by Joseph Weizenbaum, simulating a…
SquareX to Reveal Critical Data Splicing Attack at BSides SF, Exposing Major DLP Vulnerability
SquareX researchers Jeswin Mathai and Audrey Adeline will be disclosing a new class of data exfiltration techniques at BSides San Francisco 2025. Titled “Data Splicing Attacks: Breaking Enterprise DLP from the…
Microsoft Joins Google and Yahoo in Strengthening Email Sender Requirements
In a significant move to bolster email security and user trust in emails, Microsoft has announced new requirements for high-volume email senders targeting Outlook.com, Hotmail.com,…
Entrust Cryptographic Security Platform provides visibility into cryptographic risk posture
Entrust announced the Entrust Cryptographic Security Platform, a unified, end-to-end cryptographic security management solution for keys, secrets, and certificates. Cyberattacks on data security and identity…
The New Cyber Risks Facing Supply Chains
Introduction Cyber threats targeting supply chains have become a growing concern for businesses across industries. As companies continue to expand their reliance on third-party vendors,…
Interview: Markus Schümmelfeder, CIO, Boehringer Ingelheim
Markus Schümmelfeder has spent more than a decade looking for ways to help biopharmaceutical giant Boehringer Ingelheim exploit digital and data. He joined the company…
MITRE CVE Contract Extended Just Before Expiration
The Common Vulnerabilities and Exposures (CVE) Program is one of the most central programs in cybersecurity, so news that MITRE’s contract to run the program…
On Average, Mean, Median, and Mode
If you’re reading this you’re probably a bit geeky (like me), and you’ve no doubt been in at least 42 conversations about average vs. mean,…
Finding more vulnerabilities in vibe coded apps
Vibe coding is the latest trend sweeping through developer communities. It’s the art of describing a concept, feeding it to an AI, and letting the…
CISA launches new wave of job cuts
The Cybersecurity and Infrastructure Security Agency is in the process of a major push to eliminate jobs, starting with a voluntary resignation program, part of…