Signal's Explosive Growth — What WhatsApp's Privacy Slip Means
··911 words·5 mins
WhatsApp’s updated privacy policy drives millions to Signal, highlighting the growing demand for privacy-respecting open-source alternatives.
- Osmond van Hemert — Senior Software Engineer & Applied AI/
- Blog Categories: AI, Security, Development & Infrastructure/
- Security Incidents, Vulnerabilities & Defense/
Security Incidents, Vulnerabilities & Defense
This category gathers posts where security is the main story: breaches, vulnerabilities, software supply-chain incidents, and the practical response to each. Use the articles below to examine how attacks work, what is known, and which defensive decisions follow from the evidence.
For incident timelines, visit Breaches & Zero Days. The Cybersecurity tag follows security themes across other categories too, including infrastructure and developer tooling.
SolarWinds Hack — Why Supply Chain Attacks Should Terrify You
··1048 words·5 mins
The SolarWinds supply chain attack is a watershed moment for software security — and it has profound implications for how we build, ship, and trust code.
FireEye Breach — When the Red Team Gets Red-Teamed
··961 words·5 mins
FireEye discloses that sophisticated attackers stole their red team tools.
NSA and CISA Sound the Alarm on Known Vulnerabilities
··977 words·5 mins
A joint NSA/CISA advisory details 25 CVEs actively exploited by Chinese state-sponsored actors. The uncomfortable truth: most are well-known and patchable.
Zerologon — A 10-Out-of-10 Vulnerability That Should Terrify
··858 words·5 mins
CVE-2020-1472, dubbed Zerologon, scores a perfect 10.0 CVSS and allows full domain takeover with a handful of packets. Here’s what you need to know.
The Twitter Bitcoin Hack — A Social Engineering Masterclass
··1019 words·5 mins
The massive Twitter compromise that hit Barack Obama, Elon Musk, and Apple wasn’t a sophisticated zero-day — it was social engineering targeting internal tools.
The Pandemic IoT Boom — More Devices, More Risk, Old Problems
··1087 words·6 mins
Home IoT device sales have surged during lockdowns, and every one of those devices just joined a corporate network via VPN.
Apple and Google's Exposure Notification API — Privacy at Scale
··1108 words·6 mins
Apple and Google collaborate on a Bluetooth-based exposure notification system that puts privacy-preserving architecture front and center.
Zoom's Security Reckoning — When Rapid Growth Exposes Debt
··997 words·5 mins
Zoom’s explosive pandemic-driven growth is exposing serious security and privacy issues. The ‘Zoombombing’ phenomenon is just the tip of the iceberg.
The Crypto AG Revelation — Your Encryption Vendor, the CIA
··1080 words·6 mins
The Washington Post reveals the CIA secretly owned Crypto AG for decades, selling compromised encryption to governments worldwide.
The NSA Found a Critical Windows Crypto Bug — That's Good News
··956 words·5 mins
The NSA disclosed CVE-2020-0601, a critical vulnerability in Windows CryptoAPI’s certificate validation.