Blog Posts | Joshua Berkowitz

10 Articles

incident response ×

How Log4Shell Exposed the Critical Gaps in Software Security

The discovery of Log4Shell in late 2021 forced organizations to confront the fragility of modern software. The vulnerability’s rapid spread was a wake-up call, revealing how a single overlooked compon...

cybersecurity incident response Log4j Log4Shell open source risk management software supply chain vulnerability

Oct 28, 2025

0 902

News

How Attackers Exploit the CVE-2025-10035 GoAnywhere MFT Vulnerability and How to Defend Against It

Cybersecurity threats are relentless, and the swift exploitation of the CVE-2025-10035 vulnerability in GoAnywhere Managed File Transfer (MFT) is a prime example. When vulnerabilities like this critic...

CVE-2025-10035 GoAnywhere MFT incident response Microsoft Defender ransomware Storm-1175 threat intelligence vulnerability

Oct 13, 2025

0 2046

News

The Silent Danger: Why Everyday Cloud Misconfigurations Put You at Risk

Security teams are often on high alert for flashy zero-day exploits and widely reported vulnerabilities. Yet, a quieter, more persistent danger lurks in the form of everyday misconfigurations. These s...

attack surface cloud security DevOps incident response misconfiguration vulnerabilities Wiz platform

Sep 22, 2025

0 1793

News

How Attackers Exploited ViewState Deserialization to Breach Sitecore Deployments

A sophisticated cyber campaign has targeted organizations running Sitecore products, exploiting a critical zero-day flaw ( CVE-2025-53690 ). Attackers gained remote code execution by abusing exposed A...

cybersecurity deserialization incident response malware remote code execution Sitecore ViewState zero-day

Sep 21, 2025

0 1199

News

Shai-Hulud: The First Self-Propagating npm Supply Chain Worm

In September 2025, the JavaScript community experienced a watershed moment: the Shai-Hulud worm swept through npm, infecting over 100 popular packages. This attack was not just another instance of mal...

DevSecOps GitHub incident response JavaScript malware npm security supply chain

Sep 19, 2025

0 2222

News

Columbia University Data Breach: Lessons for Higher Education Security

More than 860,000 individuals have been impacted by a sweeping data breach at Columbia University, making it one of the largest cybersecurity incidents in higher education this year. The event has spa...

Columbia University cybersecurity data breach higher education identity theft incident response personal data ransomware

Sep 10, 2025

0 2178

News

Transforming Cloud Troubleshooting with AI: Inside Gemini Cloud Assist Investigations

Cloud troubleshooting often feels overwhelming, with vast amounts of data and intricate dependencies complicating root cause analysis. Gemini Cloud Assist Investigations , now in preview from Google, ...

AI troubleshooting automation cloud management DevOps tools Google Cloud incident response root cause analysis

Sep 5, 2025

0 3058

Gemini

Essential Security Practices for Data Integration with LLMs on Snowflake Cortex AI

As organizations increasingly integrate large language models (LLMs) with their sensitive data, security has become a top concern. A recent MIT survey found that nearly 60% of AI leaders prioritize da...

access control AI compliance cloud security data integration encryption incident response llm security zero trust

Sep 4, 2025

0 3806

News

Zero-Day SharePoint Vulnerabilities: How to Protect Your Organization Now

Security teams are racing to address two newly discovered zero-day vulnerabilities in on-premises Microsoft SharePoint Server, CVE-2025-53770 and CVE-2025-53771. Dubbed the “ToolShell” exploit chain, ...

cybersecurity incident response patching remote code execution SharePoint vulnerabilities zero-day

Sep 3, 2025

0 1056

News

How to Respond to Actively Exploited SharePoint Vulnerabilities: Immediate Steps for Security Teams

Organizations running on-premises SharePoint servers face a critical security threat as sophisticated attackers actively exploit newly discovered vulnerabilities. Recent campaigns, primarily from Chin...

Defender incident response patch management ransomware SharePoint threat actors vulnerabilities web shell

Aug 29, 2025

0 1155

News

Get All The Latest Research & News!

Subscribe

Our latest content

Check out what's new !

See all

Ads

Prompt Maker Image Generator

Struggling with the perfect AI image prompt? My free app helps you generate brilliant ideas and instantly creates an image to match. Go from concept to creation in two clicks!

Most Popular Articles

Check out what the hot topics are!

See all

Every shirt tells a story—and every story

#ClothingForACause