**NIST vulnerability bottleneck underscores fragility of software security**  
[Source](https://readme.synack.com/nist-vulnerability-bottleneck-underscores-fragility-of-software-security)

### Changelog: Hello to LockBitSupp and goodbye to Changelog  
[Read more](https://readme.synack.com/changelog-hello-to-lockbitsupp-and-goodbye-to-changelog)

**Today's Pick**  
[NIST vulnerability bottleneck underscores fragility of software security](https://readme.synack.com/nist-vulnerability-bottleneck-underscores-fragility-of-software-security)

**Author:** [Cynthia Brumfield](https://readme.synack.com/author/cynthia-brumfield)  
**Date:** October 25, 2023  
[Read more](https://readme.synack.com/the-problems-with-vulnerability-reporting)

**The problems with vulnerability reporting**  
Several recent incidents in the U.S. system for reporting vulnerabilities highlight the importance of accurate, comprehensive bug reports for defenders

### Commit 10_24_2023: Stuff we Okta know  
[Read more](https://readme.synack.com/commit-10-24-2023-stuff-we-okta-know)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 24, 2023  
Welcome to Commit 10_24_2023! README senior editor Nathaniel Mott here with your twice-weekly serving of steaming-hot cybersecurity news.

### Commit 10_23_2023: Living in strange times  
[Read more](https://readme.synack.com/commit-10_23_2023-living-in-strange-times)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 23, 2023  
Welcome to Commit 10_23_2023! README senior editor Nathaniel Mott here on the first non-rainy day in what feels like an epoch to bring you the hottest infosec news.

### Changelog: End times for Ragnar Locker and Trigona?  
[Read more](https://readme.synack.com/changelog-end-times-for-ragnar-locker-trigona)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 19, 2023  
Welcome to Changelog for 10/19/23, published by Synack! README senior editor Nathaniel Mott here with the week's top infosec news.

### MOVEit Transfer saga shows danger of the 'Dark Middle'  
[Read more](https://readme.synack.com/moveit-transfer-saga-shows-danger-of-the-dark-middle)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 18, 2023  
When attackers find vulnerabilities in software used by service providers with dozens or hundreds of clients, the impact of a breach can quickly spiral out of control.

### Commit 10_17_2023: The scourge of untrustworthy browser updates  
[Read more](https://readme.synack.com/commit-10-17-2023-the-scourge-of-untrustworthy-browser-updates)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 17, 2023  
Welcome to Commit 10_17_2023! README senior editor Nathaniel Mott here with the top infosec news.

### Commit 10_16_2023: Sandworm goes after Ukrainian telcos  
[Read more](https://readme.synack.com/commit-10-16-2023-sandworm-goes-after-ukrainian-telcos)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 16, 2023  
Welcome to Commit 10_16_2023! README senior editor Nathaniel Mott here with the top cybersecurity news.

### Changelog: The “C” in SEC stands for “cyber”  
[Read more](https://readme.synack.com/changelog-the-c-in-sec-stands-for-cyber)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 12, 2023  
Welcome to Changelog for 10/12/23, published by Synack! README senior editor Nathaniel Mott here with the week's top cyber news.

### Commit 10_10_2023: Predator targets journalists, politicians  
[Read more](https://readme.synack.com/commit-10-10-2023-predator-targets-journalists-politicians)

**Author:** [Nathaniel Mott](https://readme.synack.com/author/nathaniel-mott)  
**Date:** October 10, 2023  
Welcome to Commit 10_10_2023!