**NIST vulnerability bottleneck underscores fragility of software security**  
[Read more](https://readme.synack.com/nist-vulnerability-bottleneck-underscores-fragility-of-software-security)

### Changelog for 4/25/2024

**Changelog: Hello to LockBitSupp and goodbye to Changelog**  
[Read more](https://readme.synack.com/changelog-hello-to-lockbitsupp-and-goodbye-to-changelog)

### Changelog for 4/18/2024

**Changelog: Sandworm becomes APT44**  
[Read more](https://readme.synack.com/changelog-sandworm-becomes-apt44)

### Changelog for 4/12/2024

A sudden halt to the ranking of vulnerability severity has left government agencies and some companies without an approved source of ranking and prioritization.

### Changelog for 4/11/2024

**Changelog: Kaspersky is the new TikTok**  
[Read more](https://readme.synack.com/changelog-kaspersky-is-the-new-tiktok)

### Changelog for 4/10/2024

**CISA cyber reporting mandate faces tough road**  
[Read more](https://readme.synack.com/cisa-cyber-reporting-mandate-faces-tough-road)

A coalition of organizations has asked CISA to extend the public comment period on new cyberattack reporting rules proposed in response to CIRCIA.

### Changelog for 4/04/2024

**Changelog: Cyber review board is all bark, no bite on Microsoft**  
[Read more](https://readme.synack.com/changelog-cyber-review-board-is-all-bark-no-bite-on-microsoft)

### Changelog for 3/28/2024

**Changelog: The U.S. and U.K. expose APT31**  
[Read more](https://readme.synack.com/changelog-the-us-and-uk-expose-apt31)

### Exploits Explained

**Exploits Explained: ZIP embedding attack on Google Chrome extensions**  
[Read more](https://readme.synack.com/exploits-explained-zip-embedding-attack-on-google-chrome-extensions)

Malcolm Stagg recounts the discovery of CVE-2024-0333, a vulnerability in Google Chrome that could have been exploited to install malicious extensions.

### Changelog for 3/21/2024

**Changelog: TikTok is the new Kaspersky**  
[Read more](https://readme.synack.com/changelog-tiktok-is-the-new-kaspersky)

Welcome to Changelog for 3/21/2024, published by Synack! README senior editor Nathaniel Mott here with a reluctant defense of TikTok following the passage of a bill looking to ban it.