A selection of this week’s more interesting vulnerability disclosures and cyber security news. What a great start to the year with a stream of crypto issues. An own goal to kick things off.

Data lineage and data provenance are related terms, but different. Lineage focuses on the origins and movements of data over time, while provenance focuses on the transformations and derivations of data from original sources. Provenance helps teams to follow the source of data and verify its authenticity, surfacing any potential risks or vulnerabilities. In other words, lineage is more about “where” data travels, and provenance is more about the “what” of data history.

Picture this: A user on your network casually explores the internet and scrolls through a website’s comment section. However, a lurking threat known as cross-site scripting (XSS) is poised to exploit vulnerabilities and steal their session cookies, which includes sensitive data such as their logon credentials. But how does this nefarious scheme unfold, and what other open-source vulnerabilities could be exploited in the process?

As many companies begin to explore the vast capabilities of the public cloud ecosystem, one obstacle continues to be of extreme importance: Cost Optimization. The cloud itself was built for scalability and convenience, but when the most advanced options for your infrastructure can be set up with the touch of a button, a cost friendly migration and ongoing strategy to keep your cloud footprint within budget are key.

CISA adds two bugs to the KEV catalog, UAC-0050 distributes Remcos RAT with phishing tactics, and an updated version of Meduza Stealer launches on the dark web.

If a picture is worth a thousand words, the 2023 Gartner® Magic Quadrant™ for Endpoint Protection Platforms says it all. Today, I’m incredibly honored and proud to announce CrowdStrike has been named a Leader in the 2023 Gartner® Magic Quadrant™ for Endpoint Protection Platforms. We have been positioned furthest right for Completeness of Vision and highest for Ability to Execute among 16 vendors evaluated in the report.

Mobile devices at the workplace: this so-called trend is here to stay. In response, IT teams are recognizing their responsibility to develop a secure and high-performance operating environment for their mobile and remote workforce. Mobile-related security risks have increased to astronomical levels in the last year: All that to say: a true organizational security posture cannot ignore the mobile apps and devices that its employees and customers use.