CyberSecure Specialist

I was recently asked to speak at an event but was unable to accept due to a prior speaking commitment on the same day. This, in and of itself, is not unusual – it happens fairly often. What happened about a week later, however, gave me some interesting food for thought. Someone that was available and had agreed to speak at the event in my place approached me to ask for content for the talk.…

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights:  Ex-FBI agent’s $2.47M crypto theft compromised bureau investigations Patrick Steven Yaroch, a former…

Apache has patched a critical HTTP Server vulnerability that could allow unauthenticated remote code execution (RCE), following independent discoveries by Anthropic and Google researchers. Tracked as CVE-2026-119618, the flaw affects Apache HTTP Server versions 2.4.55 through 2.4.70. The issue was addressed on November 11 with the release of version 2.4.71. It resides in mod_http2, the module responsible for handling HTTP/2 traffic. The vulnerability involves a race condition in which multiple threads improperly access shared resources,…

November 10-11, 2026 | 11:00 AM to 4:00 PM ET – Register Day 2 of the CISO Forum Virtual Summit 2026 kicks off today, with all sessions from Day 1 now avaialble on demand. Designed exclusively for senior-level cybersecurity leaders, this immersive two-day virtual event is your premier destination to discuss, share, and learn the most innovative risk management and defense strategies defining the modern enterprise. If you haven’t secured your virtual seat yet, there’s…

Modern software is built on layers of dependencies, open source components, third party libraries and increasingly, artificial intelligence models and external data sources. For security teams, understanding exactly what is running inside an application has become less of a compliance exercise and more of an operational necessity. That is the foundation behind the Software Bill of Materials, or SBOM. In a recent episode of the SecurityWeek Podcast, host Brian “SchleiF” Schleifer sat down with cybersecurity…