**NIST vulnerability bottleneck underscores fragility of software security**  
[Read more](https://readme.synack.com/nist-vulnerability-bottleneck-underscores-fragility-of-software-security)

**Changelog: Hello to LockBitSupp and goodbye to Changelog**  
[Read more](https://readme.synack.com/changelog-hello-to-lockbitsupp-and-goodbye-to-changelog)

---

**Changelog: ArcaneDoor campaign targets Cisco devices**  
*Published by Nathaniel Mott on April 25, 2024*  
[Read more](https://readme.synack.com/changelog-arcanedoor-campaign-targets-cisco-devices)  
Welcome to Changelog for 4/25/2024, published by Synack! README senior editor Nathaniel Mott here with all the doom and gloom you need this fine Spring day.

---

**Changelog: Sandworm becomes APT44**  
*Published by Nathaniel Mott on April 18, 2024*  
[Read more](https://readme.synack.com/changelog-sandworm-becomes-apt44)  
Welcome to Changelog for 4/18/2024, published by Synack! README senior editor Nathaniel Mott here with the week’s leading security news.

---

**NIST vulnerability bottleneck underscores fragility of software security**  
*Published by Robert Lemos on April 12, 2024*  
[Read more](https://readme.synack.com/nist-vulnerability-bottleneck-underscores-fragility-of-software-security)  
A sudden halt to the ranking of vulnerability severity has left government agencies and some companies without an approved source of ranking and prioritization.

---

**Changelog: Kaspersky is the new TikTok**  
*Published by Nathaniel Mott on April 11, 2024*  
[Read more](https://readme.synack.com/changelog-kaspersky-is-the-new-tiktok)  
Welcome to Changelog for 4/11/2024, published by Synack! README senior editor Nathaniel Mott “enjoying” those April showers and bringing you the top security news of the week.

---

**CISA cyber reporting mandate faces tough road**  
*Published by Shaun Waterman on April 10, 2024*  
[Read more](https://readme.synack.com/cisa-cyber-reporting-mandate-faces-tough-road)  
A coalition of organizations has asked CISA to extend the public comment period on new cyberattack reporting rules proposed in response to CIRCIA.

---

**Changelog: Cyber review board is all bark, no bite on Microsoft**  
*Published by Nathaniel Mott on April 4, 2024*  
[Read more](https://readme.synack.com/changelog-cyber-review-board-is-all-bark-no-bite-on-microsoft)  
Welcome to Changelog for 4/4/2024, published by Synack! README senior editor Nathaniel Mott here after a long weekend with the week’s leading security news.

---

**Changelog: The U.S. and U.K. expose APT31**  
*Published by Nathaniel Mott on March 28, 2024*  
[Read more](https://readme.synack.com/changelog-the-us-and-uk-expose-apt31)  
Welcome to Changelog for 3/28/2024, published by Synack! README senior editor Nathaniel Mott here with the week’s leading security news.

---

**Exploits Explained: ZIP embedding attack on Google Chrome extensions**  
*Published by Malcolm Stagg on March 28, 2024*  
[Read more](https://readme.synack.com/exploits-explained-zip-embedding-attack-on-google-chrome-extensions)  
Malcolm Stagg recounts the discovery of CVE-2024-0333, a vulnerability in Google Chrome that could have been exploited to install malicious extensions.

---

**Changelog: TikTok is the new Kaspersky**  
*Published by Nathaniel Mott on March 21, 2024*  
[Read more](https://readme.synack.com/changelog-tiktok-is-the-new-kaspersky)  
Welcome to Changelog for 3/21/2024, published by Synack! README senior editor Nathaniel Mott here with a reluctant defense of TikTok following the passage of a bill looking to ban it.