Fractional CISO & Founder of CybersecTools | Strategic Security Advisor for B2B Scale-Ups & Cybersecurity Vendors
This week: Critical Linux Shim vulnerability exposed, Chinese espionage on Dutch Military, massive data theft by ResumeLooters, Ivanti's patch, BitLocker bypass.
Explore key methodologies for aligning cybersecurity initiatives with business goals. Discover actionable steps and examples to identify business drivers.
This week's highlights: Nation-state hacks Cloudflare, Vimeo used for malware delivery. Mercedes GitHub leak & EFB hacking risks.
Learn about common mistakes AI startups make in data privacy, DevSecOps, access management, and employee training. Get actionable tips to grow with confidence.
APT29's bold attacks on HPE and Microsoft, the rise of Blackwood APT with NSPX30, Jenkins server vulnerabilities, and more
Explore Mandos Brief #35, week 3 of 2024: Midnight Blizzard's Microsoft email breach, Naz.API's 70M password leak, Chrome's critical zero-day. Stay secure.
Explore Mandos Brief #34 for week 2 of 2024: GitLab's account takeover flaw, Ivanti VPN's APT exploitation, SpectralBlur backdoor, and latest ransomware decryptors.
SMTP Smuggling impacts email security, Google's MultiLogin exploit, BGP hijacking at Orange Spain, Bitwarden's CVE-2023-27706, and new DLL Hijacking in Windows.
The last Mandos Brief of 2023 covers a sophisticated iPhone backdoor exploit, a massive digital skimming operation, and significant data breaches.