Blog Posts | Joshua Berkowitz

8 Articles

incident response ×

The Silent Danger: Why Everyday Cloud Misconfigurations Put You at Risk

Security teams are often on high alert for flashy zero-day exploits and widely reported vulnerabilities. Yet, a quieter, more persistent danger lurks in the form of everyday misconfigurations. These s...

attack surface cloud security DevOps incident response misconfiguration vulnerabilities Wiz platform

Sep 22, 2025

0 1078

News

How Attackers Exploited ViewState Deserialization to Breach Sitecore Deployments

A sophisticated cyber campaign has targeted organizations running Sitecore products, exploiting a critical zero-day flaw ( CVE-2025-53690 ). Attackers gained remote code execution by abusing exposed A...

cybersecurity deserialization incident response malware remote code execution Sitecore ViewState zero-day

Sep 21, 2025

0 759

News

Shai-Hulud: The First Self-Propagating npm Supply Chain Worm

In September 2025, the JavaScript community experienced a watershed moment: the Shai-Hulud worm swept through npm, infecting over 100 popular packages. This attack was not just another instance of mal...

DevSecOps GitHub incident response JavaScript malware npm security supply chain

Sep 19, 2025

0 1606

News

Columbia University Data Breach: Lessons for Higher Education Security

More than 860,000 individuals have been impacted by a sweeping data breach at Columbia University, making it one of the largest cybersecurity incidents in higher education this year. The event has spa...

Columbia University cybersecurity data breach higher education identity theft incident response personal data ransomware

Sep 10, 2025

0 1826

News

Transforming Cloud Troubleshooting with AI: Inside Gemini Cloud Assist Investigations

Cloud troubleshooting often feels overwhelming, with vast amounts of data and intricate dependencies complicating root cause analysis. Gemini Cloud Assist Investigations , now in preview from Google, ...

AI troubleshooting automation cloud management DevOps tools Google Cloud incident response root cause analysis

Sep 5, 2025

0 2277

Gemini

Essential Security Practices for Data Integration with LLMs on Snowflake Cortex AI

As organizations increasingly integrate large language models (LLMs) with their sensitive data, security has become a top concern. A recent MIT survey found that nearly 60% of AI leaders prioritize da...

access control AI compliance cloud security data integration encryption incident response llm security zero trust

Sep 4, 2025

0 2695

News

Zero-Day SharePoint Vulnerabilities: How to Protect Your Organization Now

Security teams are racing to address two newly discovered zero-day vulnerabilities in on-premises Microsoft SharePoint Server, CVE-2025-53770 and CVE-2025-53771. Dubbed the “ToolShell” exploit chain, ...

cybersecurity incident response patching remote code execution SharePoint vulnerabilities zero-day

Sep 3, 2025

0 638

News

How to Respond to Actively Exploited SharePoint Vulnerabilities: Immediate Steps for Security Teams

Organizations running on-premises SharePoint servers face a critical security threat as sophisticated attackers actively exploit newly discovered vulnerabilities. Recent campaigns, primarily from Chin...

Defender incident response patch management ransomware SharePoint threat actors vulnerabilities web shell

Aug 29, 2025

0 748

News

Get All The Latest Research & News!

Subscribe

Our latest content

Check out what's new !

See all

Ads

Prompt Maker Image Generator

Struggling with the perfect AI image prompt? My free app helps you generate brilliant ideas and instantly creates an image to match. Go from concept to creation in two clicks!

Most Popular Articles

Check out what the hot topics are!

See all

Every shirt tells a story—and every story

#ClothingForACause