Microsoft Delays Recall — When Security Concerns Actually Win
··1064 words·5 mins
Microsoft pulls Windows Recall from the upcoming Copilot+ PC launch after security researchers demonstrate alarming vulnerabilities in the feature’s data
- Osmond van Hemert — Senior Software Engineer & Applied AI/
- Blog Categories: AI, Security, Development & Infrastructure/
- Security Incidents, Vulnerabilities & Defense/
Security Incidents, Vulnerabilities & Defense
This category gathers posts where security is the main story: breaches, vulnerabilities, software supply-chain incidents, and the practical response to each. Use the articles below to examine how attacks work, what is known, and which defensive decisions follow from the evidence.
For incident timelines, visit Breaches & Zero Days. The Cybersecurity tag follows security themes across other categories too, including infrastructure and developer tooling.
RSA Conference 2024 — AI Meets Cybersecurity Head-On
··945 words·5 mins
RSA Conference 2024 kicks off in San Francisco with AI dominating every conversation.
The xz Utils Backdoor — Open Source's Worst Nightmare, Nearly
··934 words·5 mins
A sophisticated supply chain attack via the xz Utils compression library was caught just days before reaching stable Linux distributions.
Operation Cronos — The LockBit Takedown and What It Means
··917 words·5 mins
An international law enforcement coalition takes down the LockBit ransomware group’s infrastructure in a landmark operation.
Jenkins Under Fire — CVE-2024-23897 and the Cost of Legacy CI/CD
··980 words·5 mins
A critical Jenkins vulnerability allows arbitrary file reads through the CLI.
Terrapin Attack — SSH Isn't As Bulletproof As We Thought
··942 words·5 mins
Researchers disclose the Terrapin attack against SSH, demonstrating that even our most trusted protocols can harbor subtle cryptographic weaknesses.
ICBC Ransomware Attack — When the World's Largest Bank Gets Hit
··949 words·5 mins
The LockBit ransomware attack on ICBC’s US operations disrupted Treasury market trading and exposed critical vulnerabilities in financial infrastructure.
HTTP/2 Rapid Reset — The Zero-Day That Hit Everyone
·996 words·5 mins
CVE-2023-44487 exploits a fundamental aspect of HTTP/2 to enable record-breaking DDoS attacks. Here’s what you need to know and do.
The MGM Resorts Hack — A $100M Lesson in Social Engineering
··1079 words·6 mins
The MGM Resorts cyberattack that started with a phone call is a stark reminder that the most sophisticated defenses can be undone by human vulnerability.
Intel's Downfall Bug — Another Speculative Execution Headache
··997 words·5 mins
A new Intel CPU vulnerability called Downfall exposes sensitive data through speculative execution, and the performance impact of mitigations is significant.
MOVEit Transfer: The Supply Chain Breach That Keeps Growing
··1004 words·5 mins
The MOVEit Transfer vulnerability has now impacted hundreds of organizations worldwide — a stark reminder that managed file transfer tools remain critical and
MOVEit Transfer Zero-Day — Another Supply Chain Nightmare Unfolds
··985 words·5 mins
A critical zero-day in Progress MOVEit Transfer is being actively exploited, and the scope of the damage is still emerging.