The Suffocating Embrace of Accumulated Law The Government (I speak of the US Government in this article, although the principle argument is as good as a blueprint for many other governments globally) has developed a peculiar affliction over the past half-century: the inability to throw …
I just graduated from Isik University with a Bachelor of Computer Science and Engineering, and like many recent graduates, I am working on finding my place in the tech world. It feels exciting because it opens new possibilities, but it is also stressful at times …
14 – 30 Nov 2025 A newly disclosed and actively exploited FortiWeb vulnerability (CVE-2025-58034) allows authenticated attackers to execute arbitrary OS commands, posing a serious risk to organizations relying on the platform for critical web application protection. Despite its medium-severity vulnerability (CVSS score of 6.7), …
17 – 23 Nov 2025 On Monday Google released security updates for its Chrome browser to address two security flaws, including one that has come under active exploitation in the wild. Our CVE of the Week is about CVE-2025-13223 vulnerability with a CVSS score of …
You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging it by clicking the fullscreen icon, which is the third icon from the right. All article titles …
Director, Automation and Cybersecurity OT Practitioner With over sixteen years of experience in industrial automation and cybersecurity, Prasad specialises in architecting secure and resilient systems across Oil and Gas, Cement, and Power sectors. As a PMP certified project leader and Agile practitioner, he brings extensive …
On Tuesday December 9, CyAN member Karthikeyan Ramdass will present an analysis of the massive 2025 npm supply chain attack (CISA.gov) that used compromised packages to attack numerous online services. We will learn topics such as how and why did it happen? How could it have been prevented? What …
10 – 16 Nov 2025 Mandiant has confirmed that threat actors are actively exploiting a critical flaw (CVE-2025-12480) in Triofox by Gladinet — a remote access and file-sharing platform.The vulnerability allows authentication bypass, letting attackers create admin accounts and execute arbitrary code by abusing the …
