Newsletter
Nov 10, 20249 min read
Brief #77: PAN-OS Vulnerability, Google's AI Finds SQLite Bug, AWS Cert Tops Pay List
Criminals exploiting DocuSign APIs for fraud. Apple offers $1M for PCC vulnerabilities. Latest security acquisitions.
Brief
The Mandos Brief — a 3-minute weekly rundown of what actually moved the cybersecurity market: funding rounds, M&A, and the vendor moves behind them. Market signals for cybersecurity vendors and investors.
150articles
Newsletter
Nov 3, 20249 min read
Brief #76: 19M Records Exposed, AI Generates 25% of Code, CrowdStrike Lawsuit
Multiple critical vulnerabilities in NetIQ iManager, cybersecurity workforce growth stalls, and AI reshapes code development at Google.
Newsletter
Oct 27, 20249 min read
Brief #75: Fortinet Zero-Day, Agentic AI Risks, Growring Strategic Influence of CISOs
Critical Fortinet zero-day affecting 50+ victims, SharePoint vulnerability added to CISA catalog, and APT29's sophisticated phishing campaign targeting military sectors.
Newsletter
Oct 20, 20248 min read
Brief #74: Cybersecurity Salaries Soar, Microsoft Loses Security Logs, PAM trends
Critical Kubernetes flaw enables root access. Safari bypass grants camera access. Cloud security engineers earn around $136K. AI introduces new zero-day vulnerabilities.
Newsletter
Oct 13, 20247 min read
Brief #73: Casio Breach, Ivanti Zero-Day,CISO Compensation
Ivanti CSA zero-days exploited. AI detects novel email scams. CISOs crucial in M&A cybersecurity. Global security workforce stalls.
Newsletter
Oct 6, 20249 min read
Brief #72: NVIDIA flaw, 3.8 Tbps Cloudflare DDoS, AWS AI hijacking
Mysterious Linux malware exploiting misconfigurations, LLMs' package hallucination risks, and new API Security Maturity Model
Newsletter
Sep 29, 20249 min read
Brief #71: Storm-0501 Targets Hybrid Clouds, CUPS RCE Flaw, AI Security Challenges, Wiz's $20B Valuation
Storm-0501 ransomware targets hybrid clouds, CUPS vulnerability allows Linux RCE, AI models face sophisticated attacks, and Wiz discusses $15-20B valuation. CISOs navigate AI hype and technical debt.
Newsletter
Sep 22, 202410 min read
Brief #70: China's 260K-Device Botnet Thwarted, SolarWinds RCE Flaw, macOS Zero-Click Exploit, AI in Compliance
FBI dismantles massive China-backed botnet, SolarWinds patches critical RCE flaw, zero-click macOS vulnerability discovered, and AI revolutionizes compliance monitoring.
Newsletter
Sep 15, 202410 min read
Brief #69: Fortinet Breach, Vision Pro Vulnerability, AI Security Risks, $2.65B Mastercard Acquisition
Fortinet acknowledges data breach, Apple patches Vision Pro vulnerability, OpenAI releases new AI models, Mastercard acquires Recorded Future for $2.65B, and the rise of Application Detection and Response (ADR).
Stop losing deals to vendors with worse products and better positioning
Get the CISO perspective: founder-led positioning audits, competitive benchmarks, and advisory for cybersecurity vendors who need CISOs to actually pay attention.
See Mandos services