Latest
Graphalgo: North Korean Rock Salt in the Wound of Today's Cybersecurity Job Market
Lazarus-linked threat actors exploit fake recruiter campaigns in an operation ReversingLabs calls “graphalgo,” turning technical job interviews into remote access trojan (RAT) delivery mechanisms that target developers.
Five Security Pros Dedicated to the Mental Health of Cyber Defenders
Mental health tools for cybersecurity practitioners have become essential in this age of accelerating cyber warfare. Here are five people who are building those tools.
White House Readies Five-Page Cybersecurity Strategy Built on Offense, Deterrence, and Deregulation
The forthcoming plan marks a sharp pivot from the Biden era—and some experts warn it may leave the nation more exposed, not less.
From Notepad++ to Epoch Theory: Why Old Assumptions Are Failing Security Teams
Also: practitioners pushing the community forward, how automation is reshaping defense, and the need for clearer thinking in an increasingly noisy security landscape.
Doing Cool Stuff with Dr. Dustin Sachs
Dr. Dustin Sachs on why he started Psybercog Labs and how he believes it will help combat burnout and improve the mental health of cyber defenders.
Six Months of Silence: How a Hijacked Text Editor Exploited Structural Flaws in Enterprise Security
The Notepad++ incident isn't just another nation-state compromise. This attack highlights how developer tools are a governance blind spot, ongoing weaknesses in the integrity of update mechanisms, and the continued evolution of supply chain attacks.
A New #FollowFriday List for the Cybersecurity Community
After years of hiatus, my weekly #FollowFriday list is back. There's no better home for it than CYBR.SEC.Media, because we are building a community.
Epoch Theory and the Future of Vulnerability Management
Epoch Theory is Jeremiah Grossman’s framework for understanding how cybersecurity evolves in distinct phases driven by attacker behavior, not defensive intention.
From the Editor: A Refuge from the Sloppocalypse
Part of our mission is to be a safe house where cyber travelers can find truth and reason.
This Week: AI Security Regs Around the World -- Is Your Org Keeping Up?
AI laws on the books globally, attackers exploiting bad assumptions and bad defaults, the soul-crushing state of the cybersecurity job market, and more!