Pegasus Spyware — Zero-Click Exploits and What They Mean
··771 words·4 mins
The Pegasus Project revelations expose industrial-grade zero-click exploits targeting journalists and activists — and raise uncomfortable questions about
- Osmond van Hemert — Senior Software Engineer & Applied AI/
- Blog Tags: Software Development, AI, Security & Infrastructure/
- Cybersecurity Across Software & Cloud/
Cybersecurity Across Software & Cloud
Cybersecurity is not confined to incident reports. This tag follows threats and defenses across software dependencies, cloud platforms, developer tooling, and operational practice. Browse the list below when you want the security angle on those topics, even when security is not the post’s primary category.
For articles organized primarily as security analysis, use the Security category. To follow a particular threat pattern, explore the Supply Chain Security series.
Kaseya VSA Attack — Supply Chain Ransomware Goes Nuclear
·1166 words·6 mins
The REvil ransomware group exploited Kaseya’s VSA platform to hit over 1,500 businesses simultaneously. This is what supply chain attacks look like at scale.
Colonial Pipeline Ransomware — Cybersecurity Meets Infrastructure
··1041 words·5 mins
The Colonial Pipeline ransomware attack exposes how deeply intertwined our digital infrastructure has become with physical systems we take for granted.
The Codecov Breach — When Your CI Pipeline Becomes the Target
··1067 words·6 mins
Codecov’s compromised Bash Uploader script exposed CI/CD secrets for thousands of organizations, highlighting a systemic weakness in how we trust third-party
PHP's Git Server Breach — A Supply Chain Wake-Up Call
··886 words·5 mins
Attackers pushed malicious commits to PHP’s official Git repository, exposing the fragile trust model behind open-source supply chains.
Hafnium and the Microsoft Exchange Zero-Days Unfold
··920 words·5 mins
Four zero-day vulnerabilities in Microsoft Exchange Server are being actively exploited at scale, and the fallout is only beginning.
Python 3.9.2 and 3.8.8 — Security Patches, Maturing Ecosystem
··810 words·4 mins
Python’s latest security releases fix critical vulnerabilities and highlight the increasingly professional security posture of the Python ecosystem.
SolarWinds Three Months Later — Rethinking Supply Chain Security
··1022 words·5 mins
Three months after the SolarWinds breach disclosure, the full scope is still unfolding and the implications for software supply chain security demand
Signal's Explosive Growth — What WhatsApp's Privacy Slip Means
··911 words·5 mins
WhatsApp’s updated privacy policy drives millions to Signal, highlighting the growing demand for privacy-respecting open-source alternatives.
SolarWinds Hack — Why Supply Chain Attacks Should Terrify You
··1048 words·5 mins
The SolarWinds supply chain attack is a watershed moment for software security — and it has profound implications for how we build, ship, and trust code.
FireEye Breach — When the Red Team Gets Red-Teamed
··961 words·5 mins
FireEye discloses that sophisticated attackers stole their red team tools.
NSA and CISA Sound the Alarm on Known Vulnerabilities
··977 words·5 mins
A joint NSA/CISA advisory details 25 CVEs actively exploited by Chinese state-sponsored actors. The uncomfortable truth: most are well-known and patchable.