Salt Typhoon — The Telecom Hack That Should Worry Every Engineer
·1006 words·5 mins
The Salt Typhoon campaign has compromised major US telecoms at a staggering scale. What developers and architects need to understand about this ongoing threat.
- Osmond van Hemert — Senior Software Engineer & Applied AI/
- Blog Tags: Software Development, AI, Security & Infrastructure/
- Cybersecurity Across Software & Cloud/
Cybersecurity Across Software & Cloud
Cybersecurity is not confined to incident reports. This tag follows threats and defenses across software dependencies, cloud platforms, developer tooling, and operational practice. Browse the list below when you want the security angle on those topics, even when security is not the post’s primary category.
For articles organized primarily as security analysis, use the Security category. To follow a particular threat pattern, explore the Supply Chain Security series.
Salt Typhoon and the Telecom Breach — Infrastructure Under Siege
··1086 words·6 mins
The Salt Typhoon campaign has compromised major US telecom providers, exposing the fragility of critical infrastructure and the growing sophistication of
CUPS Overflows — A Critical Linux Printing Vulnerability Emerges
··905 words·5 mins
A chain of vulnerabilities in CUPS, the Linux printing system, enables remote code execution — and highlights how forgotten infrastructure becomes a security
NIST Finalizes Post-Quantum Cryptography Standards
··837 words·4 mins
NIST has published its first three finalized post-quantum cryptography standards. Here’s what developers need to know and do.
The CrowdStrike Outage — When a Security Update Breaks the World
··1061 words·5 mins
A faulty CrowdStrike Falcon sensor update has caused one of the largest IT outages in history, bricking millions of Windows machines worldwide.
regreSSHion — A Wake-Up Call Hiding in Plain Sight
··784 words·4 mins
CVE-2024-6387 reveals a critical remote code execution flaw in OpenSSH, and it’s a regression from a fix made back in 2006.
The Polyfill.io Attack — A Wake-Up Call for CDN Trust
··1056 words·5 mins
The polyfill.io domain was acquired by a Chinese company and began injecting malware into over 100,000 websites, exposing fundamental weaknesses in how we
Microsoft Delays Recall — When Security Concerns Actually Win
··1064 words·5 mins
Microsoft pulls Windows Recall from the upcoming Copilot+ PC launch after security researchers demonstrate alarming vulnerabilities in the feature’s data
RSA Conference 2024 — AI Meets Cybersecurity Head-On
··945 words·5 mins
RSA Conference 2024 kicks off in San Francisco with AI dominating every conversation.
The xz Utils Backdoor — Open Source's Worst Nightmare, Nearly
··934 words·5 mins
A sophisticated supply chain attack via the xz Utils compression library was caught just days before reaching stable Linux distributions.
Operation Cronos — The LockBit Takedown and What It Means
··917 words·5 mins
An international law enforcement coalition takes down the LockBit ransomware group’s infrastructure in a landmark operation.
Jenkins Under Fire — CVE-2024-23897 and the Cost of Legacy CI/CD
··980 words·5 mins
A critical Jenkins vulnerability allows arbitrary file reads through the CLI.