Cross-sector · Security & Resilience
Articles in this selection, newest first. Change the filters, or clear them to see every article.
9 articles · Cross-sector · Security & Resilience
Articles
Week of 7 September 2026
Europe’s 24-hour vulnerability clock reports to regulators first and customers second
From September 11, 2026, Europe’s Cyber Resilience Act gave manufacturers 24 hours to warn authorities when attackers exploit a flaw in their products. Customers must be told too, but on no fixed clock, so buyers still need their own way to hear about it.
Week of 6 October 2025
Cl0p’s Oracle campaign: an attack on the systems security teams did not run
Cl0p’s Oracle E-Business Suite extortion wave worked because the finance system sat with finance, not security. Closing that gap takes three decisions: who can pull the plug in an emergency, what faces the internet, and how much old data the system keeps.
Week of 22 July 2024
Why North Korea’s fake remote hires succeed in the gaps between HR, IT and security
KnowBe4 hired a remote engineer who turned out to be a North Korean IT worker. The scheme worked by slipping through four hand-offs owned by different teams. It fails when one verified identity follows the hire from interview to daily work.
Week of 5 June 2023
Most MOVEit victims never ran MOVEit
MOVEit reached thousands of organizations through the payroll, pension and contractor firms that ran it for them. Those clients had nothing to patch. What mattered was how fast they found affected vendors, who notified whom, and how much data they had handed over.
Week of 6 February 2023
One console, every server: what ESXiArgs exposed about the hypervisor
ESXiArgs used a flaw fixed two years earlier, but the damage came from where it struck. Hit the software that runs all your servers, and one break-in can lock every machine, slip past most security tools and reach the backups too.
Week of 22 August 2022
LastPass and the first-draft problem in vendor breach notices
In August 2022, LastPass said thieves had taken source code but no customer data. The attacker’s next move was already under way. The real test for customers was reading that first notice for what it made possible, and being ready to change every password.
Week of 18 October 2021
BlackMatter’s reach was set by the directory, not the malware
The October 2021 BlackMatter advisory described an unglamorous attack: intruders walked in with stolen passwords and simply asked the company directory where everything was. How far one login could travel had been decided years earlier, by how access was designed.
Week of 20 July 2020
The control system map most operators did not have
On July 23, 2020, the NSA and CISA urged immediate action to protect the systems that run pumps, chillers and power. Their first and hardest request was an accurate map of what was actually connected, something few utilities, hospitals or data center operators had.
Week of 20 April 2020
Zoom 5.0 fixed the vendor layer; configuration and records stayed yours
Zoom 5.0, released in April 2020, fixed real problems in its own product. For banks, hospitals and agencies, the bigger risks lived in two places no vendor could fix for them: how the tool was set up, and what its meetings left behind.