Newsletter
Mar 3, 20246 min read
Brief #41: 100k Infected Repos, Lazarus Zero-Day, Ubiquiti Hack
Ad fraud campaign using 8k+ domains, Lazarus Group's Windows zero-day exploit, and Russian hackers' Ubiquiti routers hijack.
Brief
The Mandos Brief — a 3-minute weekly rundown of what actually moved the cybersecurity market: funding rounds, M&A, and the vendor moves behind them. Market signals for cybersecurity vendors and investors.
150articles
Newsletter
Feb 25, 20246 min read
Brief #40: APT Hacks US Pharmacies, Apple Shortcuts Flaw
US pharmacies hit by nation-state cyberattack, Apple Shortcuts vulnerability, Microsoft's PyRIT for AI security, SSH-Snake exploited, LockBit disrupted.
Newsletter
Feb 18, 20245 min read
Brief #39: iOS Trojan Steals FaceID, Akira Attacks & More
Week's focus: iOS Trojan GoldPickaxe targeting APAC, Akira ransomware exploits Cisco vulnerability. Plus, Exchange Server risk and state-sponsored attacks.
Newsletter
Feb 11, 20245 min read
Brief #38: Dutch Military Hacked, BitLocker Bypassed and More
This week: Critical Linux Shim vulnerability exposed, Chinese espionage on Dutch Military, massive data theft by ResumeLooters, Ivanti's patch, BitLocker bypass.
Newsletter
Feb 4, 20245 min read
Brief #37: Cloudflare Breach, AnyDesk Hacked & More
This week's highlights: Nation-state hacks Cloudflare, Vimeo used for malware delivery. Mercedes GitHub leak & EFB hacking risks.
Newsletter
Jan 28, 20246 min read
Brief #36: APT29 Targets HPE, Blackwood APT & More
APT29's bold attacks on HPE and Microsoft, the rise of Blackwood APT with NSPX30, Jenkins server vulnerabilities, and more
Newsletter
Jan 21, 20246 min read
Brief #35: Russian Hack Hits Microsoft, Naz.API Breached
Explore Mandos Brief #35, week 3 of 2024: Midnight Blizzard's Microsoft email breach, Naz.API's 70M password leak, Chrome's critical zero-day. Stay secure.
Newsletter
Jan 14, 20245 min read
Brief #34: GitLab Zero-Click Hijack, Ivanti VPN Exploit and More
Explore Mandos Brief #34 for week 2 of 2024: GitLab's account takeover flaw, Ivanti VPN's APT exploitation, SpectralBlur backdoor, and latest ransomware decryptors.
Newsletter
Jan 7, 20246 min read
Brief #33: SMTP Smuggling, Google MultiLogin Exploit and More
SMTP Smuggling impacts email security, Google's MultiLogin exploit, BGP hijacking at Orange Spain, Bitwarden's CVE-2023-27706, and new DLL Hijacking in Windows.
Stop losing deals to vendors with worse products and better positioning
Get the CISO perspective: founder-led positioning audits, competitive benchmarks, and advisory for cybersecurity vendors who need CISOs to actually pay attention.
See Mandos services