Authenticity
Why “Scars Over Scabs” Is the Only Content Rule You Need
A podcast episode on strategic vulnerability offers a simple motto for deciding what personal content to share at work—and why…
▚Vulnerability
CVE
Zyxel Patches Critical Command Injection Flaw in Discontinued NAS Devices
Zyxel releases hotfixes for a critical command injection vulnerability affecting two end-of-life NAS models. What business users need to know.
Apple
Stolen Cards Still Work in Digital Wallets, Researchers Warn
Researchers found that fraudsters can keep using stolen cards via Apple Pay, Google Pay and PayPal even after banks block…
DNS hijack
Squarespace Crypto Hijack: What Agile Teams Must Learn
Crypto sites hosted on Squarespace were hijacked after a Google Domains migration flaw. Here's what Agile and DevOps teams should…
application-security
Log4Shell: What the Worst Java Flaw Means for Your Sprint
Security teams scramble as Log4j RCE vulnerability threatens Java stacks worldwide. Here's what matters for your team.
Cryptography
NSS BigSig Flaw Hits Mozilla Apps and Beyond
A critical buffer overflow in Mozilla's NSS crypto library, dubbed BigSig, puts Thunderbird, LibreOffice and other apps at risk of…