Changelog

A newsletter by README_

Your essential guide to what's happening in security.

By signing up, you will create a Medium account if you don’t already have one. Review our Privacy Policy for more information about our privacy practices.

Medium sent you an email at to complete your subscription.

Sent by Changelog

U.S. cyber board’s Lapsus$ postmortem, CPU vulns and remembering Vim’s creator

Aug 13, 2023

Welcome to Changelog for 8/13/23, published by Synack! Nathaniel Mott here with a special announcement: README and Changelog will be…

Back-to-back Ivanti vulns, Microsoft woes and robocaller schadenfreude

Aug 6, 2023

Welcome to Changelog for 8/6/23, published by Synack! Nathaniel Mott here with the week’s security news. Yes, README will be covering Black…

Disruptive Chinese malware, Storm-0558 fallout and SEC cyber rules

Jul 30, 2023

Welcome to Changelog for 7/30/23, published by Synack! Nathaniel Mott here, still parsing the New York Times’ blockbuster report Saturday…

Google cuts the cord, Microsoft takes a security pay cut and the U.S. slaps spyware firms

Jul 23, 2023

Welcome to Changelog for 7/23/23, published by Synack! Nathaniel Mott here, braving ongoing thunderstorms throughout upstate New York to…

China’s U.S. agency hacking spree, zero-days galore and USB malware

Jul 16, 2023

Welcome to Changelog for 7/16/23, published by Synack! Nathaniel Mott here, signing in from upstate New York. README was onsite at the…

TrueBot rises, a major port gets ransomwared and EVs’ cyber problem

Jul 9, 2023

Welcome to Changelog for 7/9/23, published by Synack! Nathaniel Mott here, hoping we can all finally catch a break from the big East Coast…

The SEC goes after SolarWinds, LockBit extorts TSMC and a high school password fail

Jul 2, 2023

Welcome to Changelog for 7/2/23, published by Synack! Nathaniel Mott here, ready to jinx everyone’s Fourth of July by bringing up the “K”…

Apple patches zero-days, MOVEit Transfer vuln leaks and the FBI gets cute

Jun 25, 2023

Welcome to Changelog for 6/25/23, published by Synack! Nathaniel Mott here after our Juneteenth break with the latest security news.

MOVEit users extorted, Barracuda bitten and GoAnywhere woes not going anywhere

Jun 11, 2023

Welcome to Changelog for 6/11/23, published by Synack! Nathaniel Mott here, emerging from the smoke of Ottawa’s wildfires with the week’s…

A new iOS zero-click exploit, MOVEit sees mass exploitation and ransomware keeps on coming

Jun 4, 2023

Welcome to Changelog for 6/4/23, published by Synack!

Ransomware that cares, TLD concerns and the “Sangria Tempest” cyberthreat

May 21, 2023

Welcome to Changelog for 5/21/23, published by Synack! Nathaniel Mott here with a recap of what happened in cyber this week. Programming…

Snake’s takedown, irksome commercial surveillance and a federal data breach

May 14, 2023

Welcome to Changelog for 5/14/23, published by Synack—and Happy Mother’s Day! Nathaniel Mott here with the week’s security news.

Ransomware struggles, a SolarWinds retrospective and a safety win for location trackers

May 7, 2023

Welcome to Changelog for 5/7/23, published by Synack! Nathaniel Mott here with the latest security news and… pickleball? Let’s talk about…

PaperCut vulnerabilities, DDoS amplification and jerks leaking info about schoolkids

Apr 30, 2023

Welcome to Changelog for 4/30/23, published by Synack! Nathaniel Mott here with the latest security news and the utmost sympathy for…

RSAC 2023, supply chain problems and a broken ransomware record

Apr 23, 2023

Welcome to Changelog for 4/23/23, published by Synack! Nathaniel Mott here, writing in the calm before the RSA 2023 storm—but more on that…

Israeli spyware revealed, a doozy of a Patch Tuesday and ransomware fallout

Apr 16, 2023

Welcome to Changelog for 4/16/23, published by Synack! Nathaniel Mott here, back with a look at some of the biggest cybersecurity news of…

Russia’s ‘Vulkan Files,’ a 3CX supply chain attack and White House action on spyware

Apr 2, 2023

Welcome to Changelog for 4/2/23, published by Synack! Nathaniel Mott here, back with a look at some of the biggest cybersecurity news of…

Tesla exploits, a hacker obituary and a look past Capitol Hill’s TikTok fixation

Mar 26, 2023

Welcome to Changelog for 3/26/23, published by Synack! It’s me, Blake, and I can’t believe RSA is less than a month away. There’s still…

Sandworm’s kingpin, a CISA ransomware pilot and pandemic scams

Mar 19, 2023

Welcome to Changelog for 3/19/23, published by Synack! Blake here, basking in the annual D.C. tradition of peak cherry blossom bloom. I’ll…

A D.C. healthcare breach, ransomware updates and China’s “most active” cyberthreat

Mar 12, 2023

Welcome to Changelog for 3/12/23, published by Synack! It’s me, Blake, and I’m excited about tonight’s season finale of The Last of Us —…

A national cyber strategy, EPA cyber regulations and one giant leap for space hacking

Mar 5, 2023

Welcome to Changelog for 3/5/23, published by Synack! Blake here, filling in for Nate Mott over the next few weeks. I just got back from my…

Honeypots for Dota cheats, Dole ransomware and Russia’s waning influence ops

Feb 26, 2023

Welcome to Changelog for 2/26/23, published by Synack! Nate Mott here, signing on from upstate New York—which is currently getting less…

Stalkerware worries, a WebKit zero-day and Chris Inglis’s departure

Feb 19, 2023

Welcome to Changelog for 2/19/23, published by Synack! Nate Mott here, writing from the cold-once-again boonies of upstate New York with…

Trickbot sanctions, hypervisor woes and ransomware by any other name

Feb 12, 2023

Welcome to Changelog for 2/12/23, published by Synack! The weather’s been nice here in upstate New York, but that hasn’t warmed my heart…

Passing the buck in cybersecurity, unleashing managed Chromebooks and ransomware attacks on schools

Feb 5, 2023

Welcome to Changelog for 2/5/23, published by Synack!

Hive disrupted, Google’s ad problems and new wiper malware in Ukraine

Jan 29, 2023

Welcome to Changelog for 1/29/23, published by Synack! Nate Mott here and ready to recap the week in cybersecurity. Without further ado:

ShmooCon highlights, T-Mobile’s API security woes and the government’s unfinished cyber business

Jan 22, 2023

Welcome to Changelog for 1/22/23, published by Synack! Hello from ShmooCon 2023! Nate Mott here, delivering you a special edition from the…

“Cold River” hackers, ransomware updates and Operation Aurora’s legacy

Jan 8, 2023

Welcome to Changelog for 1/8/23, published by Synack! It’s me, Blake, hoping you all had a restful holiday season. I made a cyber New…

Disappearing SBOMs, a bevy of zero-days and the Father Christmas Worm

Dec 18, 2022

Welcome to Changelog for 12/18/22, published by Synack! Nate here, delivering your last edition of the year. We’ll return Sunday, Jan. 8…

Log4j’s anniversary, Apple security moves and risky Exchange servers

Dec 11, 2022

Welcome to Changelog for 12/11/22, published by Synack! Blake here, excited to share that I’ll be co-hosting Season 2 of the WE’RE IN…

Pipeline cyber rules, a Coinbase extortion attempt and World Cup scammers

Dec 4, 2022

Welcome to Changelog for 12/4/22, published by Synack! It’s me, Blake, back after a Thanksgiving break. Grudging kudos to the Netherlands…

Iran’s Log4j foray, Meta’s “Oops” and a looming ban on ransomware payments

Nov 20, 2022

Welcome to Changelog for 11/20/22, published by Synack! Blake here, delivering the week’s news alongside README senior editor Nathaniel…

A crypto implosion, Twitter shakeups and Patch Tuesday takeaways

Nov 13, 2022

Welcome to Changelog for 11/13/22, published by Synack! It’s me, Blake, bringing you the latest news with a boost from README senior editor…

PrivacyCon updates, OpenSSL vulnerabilities and a potential $1.2B in ransomware payouts

Nov 6, 2022

Welcome to Changelog for 11/6/22, published by Synack! Blake here, delivering you the past week’s news with help from Nathaniel Mott…

A flimsy influence campaign, trouble for Drizly and ransomware updates

Oct 30, 2022

Welcome to Changelog for 10/30/22, published by Synack! It’s me, Blake, compiling this week’s top news with help from README senior editor…

IoT cyber scorecards, Iranian hacking operations and a “dramatic change” to U.S. nuclear codes

Oct 23, 2022

Welcome to Changelog for 10/23/22, published by Synack! Blake here, joined by README senior editor Nathaniel Mott. There was a lot of news…

Killnet saber-rattling, a busy Patch Tuesday and a new ransomware threat

Oct 16, 2022

Welcome to Changelog for 10/16/22, published by Synack! It’s me, Blake, compiling this week’s newsletter with help from README senior…

Microsoft Exchange zero-days, the Cyber Power Index and one publisher’s hacking nightmare

Oct 2, 2022

Welcome to Changelog for 10/2/22, published by Synack! It’s me, Blake, reporting with help from README senior editor Nate Mott. It was yet…

Lapsus$ chaos, a “Metador” hacking campaign and ransomware in L.A.

Sep 25, 2022

Welcome to Changelog for 9/25/22, published by Synack! Blake here, thrilled to start channeling Mr. Autumn Man. Plenty of pumpkin spice…

Uber’s hack, Twitter whistleblower updates and a White House cyber blitz

Sep 18, 2022

Welcome to Changelog for 9/18/22, published by Synack! It’s me, Blake, coming up for air after a busy week for cybersecurity news. Let’s…

Echoes of Conti, cloud computing castles and an energy sector threat

Sep 11, 2022

Welcome to Changelog for 9/11/22, published by Synack. It’s me, Blake, back after a break to share some exciting news: Cybersecurity…

Cyber insurance vs. cyberwar, a Signal snafu and a music video exploit

Aug 21, 2022

Welcome to Changelog for 8/21/22, published by Synack! I’m your host, Blake, and I have one programming note before we dive into the week’s…

Black Hat and DEF CON, stunt hacks and Meta encryption moves

Aug 14, 2022

Welcome to Changelog for 8/14/22, published by Synack! Cue the DEF CON is canceled jokes: Heavy rains caused damaging flash flooding in Las…

Crypto heists, TLP updates and emergency alert system vulnerabilities

Aug 7, 2022

Welcome to Changelog for 8/7/22, published by Synack! The Black Hat and DEF CON cybersecurity conferences are taking place this week in Las…

Spyware in the spotlight, UEFI threats and GPS jamming

Jul 31, 2022

Welcome to Changelog for 7/31/22, published by Synack! Open source coder John Wiseman rolled out a fascinating map of global GPS…

Cyber hiring woes, biometric threats and a check-in with the IT Army

Jul 24, 2022

Welcome to Changelog for 7/24/22, published by Synack! It was a blisteringly hot week for many of us across the U.S. — I’ve hardly…

A first-of-its-kind Log4j review, TikTok security moves and cyberattacks that weren’t

Jul 17, 2022

Welcome to Changelog for 7/17/22, published by Synack! Microsoft’s game of macro musical chairs appears to be over. The company said it’s…

Lockdown Mode, mercenary hackers and Finland’s approach to hybrid war

Jul 10, 2022

Welcome to Changelog for 7/10/22, published by Synack! Blake here, back after a hiatus for the of July holiday. Last week brought a mixed…

Post-Roe data risks, BSides consequences and a Russia-Ukraine cyber update

Jun 26, 2022

Welcome to Changelog for 6/26/22, published by Synack. It’s me, Blake, back after a break for Juneteenth. Thank you to the R Street…

RSA recap, an Enigma machine and a warning on China-backed cyberthreats

Jun 12, 2022

Welcome to Changelog for 6/12/22, published by Synack! Blake here, en route to Washington, D.C., today after attending another successful…

A fresh Pwn2Own perspective, Cyber Command’s Ukraine revelation and some personal news

Jun 5, 2022

Welcome to Changelog for 6/5/22! It’s me, Blake, and I’m thrilled to announce I’m taking on a new role as editor-in-chief of README and…

Updates to CFAA guidance, ransomware progress and problems with a Pentagon cyber push

May 22, 2022

Welcome to Changelog for 5/22/22, published by Synack! Blake here, struggling to beat the heat in Washington. We’ve seen our first…

The Full Disclosure movement, an open-source oops and Viasat’s Russian hacking woes

May 15, 2022

Welcome to Changelog for 5/15/22, published by Synack! It’s me, Blake, and I’ve followed last week’s cryptocurrency price plunge with grim…

Escalating the war on passwords, post-Roe threat modeling and more Log4j lessons

May 8, 2022

Welcome to Changelog for 5/8/22, published by Synack! I’m your host, Blake. Last week’s Hack the Capitol event was a hit — I tried my…

Microsoft’s take on hybrid war, a REvil comeback and Elon Musk’s push for secure Twitter DMs

May 1, 2022

Welcome to Changelog for 5/1/22, published by Synack! Blake here, reporting from Washington, D.C. I’ll be moderating a panel on ransomware…

A hacker homecoming at S4, conference highlights and a surge in 0-days

Apr 24, 2022

Welcome to Changelog for 4/24/22, published by Synack! It’s me, Blake, and if you missed the Atlantic Council panel I moderated Friday on…

Industrial malware, an unusual botnet breakup and a culprit for a record crypto heist

Apr 17, 2022

Welcome to Changelog for 4/17/22, published by Synack! I’m your Miami-bound host, Blake, and I’m excited to deliver you news from the S4x22…

Grid cyberthreats, Bitcoin busts and a Russian botnet takedown

Apr 10, 2022

Welcome to Changelog for 4/10/22, published by Synack! Blake here, writing from the nation’s capital. Last week saw a spate of cyber…

Web3's security dilemma, AcidRain malware and a cyber defamation case

Apr 3, 2022

Welcome to Changelog for 4/3/22, published by Synack! I’m your host, Blake, and I can’t believe this is already edition №10. If you enjoy…

Triton malware indictments, more Lapsus$ chaos and ShmooCon’s revival

Mar 27, 2022

Welcome to Changelog for 3/27/22, published by Synack! It’s me, Blake, your loyal ShmooCon correspondent. The celebrated D.C. cybersecurity…

Lapsus$ group’s rampage, “protestware” and Ukraine deepfakes

Mar 20, 2022

Welcome to Changelog for 3/20/22, published by Synack! I’m your host, Blake, and I’ll be attending ShmooCon this week, so I hope to see…

Satellite cyberattacks, Russian disinformation and ContiLeaks fallout

Mar 13, 2022

Welcome to Changelog for 3/13/22, published by Synack! Congress last week sent a major piece of cybersecurity legislation to President…

Ukraine continues hacking back, Conti capsizes and a big cyber bill advances

Mar 6, 2022

Welcome to Changelog for 3/6/22, published by Synack! Blake Sobczak here, checking in from a new, FBI-friendly D.C. neighborhood. Russia’s…

Ukraine resistance, dark web scams and a new CISO for Colonial Pipeline

Feb 27, 2022

Welcome to Changelog for 2/27/22, published by Synack! Russia’s invasion of Ukraine ushered in a bleak new era for Europe. With casualties…

Clicking QR codes, Ukraine DDoS attacks and tracking Snake

Feb 20, 2022

Welcome to Changelog for 2/20/22, published by Synack! The past week brought rapid-fire U.S. attribution of Russian cyberattacks, an…

Bracing for cyberattacks as Russia readies for war

Feb 13, 2022

Welcome to Changelog for 2/13/22, published by Synack! I’m your host, Blake. From some pretty serious Apple patches to a disheartening…

One hacker vs. the Hermit Kingdom

Feb 6, 2022

Welcome to Changelog for 2/6/22, brought to you by Synack! Blake here, reporting from Washington. It’s been another jam-packed week for…

DARPA’s quest for the (almost) unhackable

Jan 30, 2022

Welcome to Changelog by README! I’m your host, Blake Sobczak. Every Sunday, I’ll deliver cybersecurity news and analysis to your inbox…