• Charles J. Kolodgy
    Contributing Writer

    Charles J. Kolodgy is a security strategist, visionary, forecaster, educator, historian, and advisor. He is a thought leader, identifying trends and concepts critical to cybersecurity, with a primary focus on the human element. He has spoken at major conferences and written numerous documents.

    Charles is presently the Principal at Security Mindsets LLC and an Adjunct Professor at Rivier University.

Articles by Charles J. Kolodgy
Halcyon ransomware
The Rise of RansomHub and Geopolitical Risks
February 11, 2025
Military strategist Sun Tzu wrote over 2000 years ago that it is critical to understand your adversary. This concept is why anti-ransomware platform provider Halcyon publishes their "Ransomware Malicious Quartile (MQ) Power Rankings." They released…
Read More >
Gravatar cloud credential harvesting
Cloud App Impersonations and the Rise of Sophisticated Credential Harvesting
February 04, 2025
There are no safe spaces on the internet. Cybercriminals will exploit any and every opportunity to launch attacks. This has been demonstrated again by researchers at SlashNext, who have uncovered a new credential harvesting campaign.…
Read More >
AppLite Trojan Zimperium
Dream Jobs or Digital Traps? AppLite Trojan Attacks Mobile Job Seekers
January 28, 2025
Finding a good job is difficult. This is why cybercriminals use job recruitment offers to trick people into downloading malicious Android mobile applications pretending to be job application software. Zimperium’s zLabs uncovered a new variant…
Read More >
VSPC Veeam vulnerabilities
Critical Flaws in Veeam Service Provider Console Demand Urgent Action
January 17, 2025
Veeam, a provider of data replication and protection software, released critical security patches to fix severe vulnerabilities affecting its Service Provider Console (VSPC). One of the vulnerabilities is rated as critical (9.9/10 on the CVSS…
Read More >
CISA CWE Top 25 vulnerabilities
Breaking Down the 2024 CWE Top 25: Addressing the Most Dangerous Software Weaknesses
January 10, 2025
A new year is a time for reflection. Looking at what happened in the prior year and setting goals for the future year. This applies to all activities, including software weaknesses. The Cybersecurity and Infrastructure…
Read More >
needrestart Ubuntu Linux
Decade-Old Vulnerabilities in Ubuntu's 'needrestart' Utility Exposed
December 29, 2024
“How did I not see that?” is the refrain when something new is discovered after the fifth watching of a movie. Software security vulnerability researchers also have those moments. For over a decade, five critical…
Read More >
Smokeloader
Old Exploits, New Threats: How SmokeLoader Continues to Haunt Vulnerable Systems
December 18, 2024
What is old is new again. That could be the mantra for cybersecurity vulnerabilities. The focus is on discovering new vulnerabilities before attackers can use them, but according to an August 2023 cybersecurity advisory published…
Read More >
Silverfort Rezonate identity security
Silverfort Strives to Redefine Identity Security with Rezonate Acquisition
December 05, 2024
Two companies that are former Gartner Cool Vendors and who share a similar vision to drastically improve identity security are now one entity. Silverfort, a growing identity security company, acquired Rezonate, a provider of identity-first…
Read More >
email fraud cyber insurance
The Rising Threat of Email Fraud: How Businesses Can Stay Ahead of Cybercriminals
November 29, 2024
It's 4:48 pm on the Friday before a long weekend, and you have just received an email from the CEO requesting immediate payment or an important deal will fall through. This could be genuine, but…
Read More >
security debt application security financial
Mounting Security Debt Is Putting Financial Services at Risk
November 22, 2024
Many financial institutions have a debt problem. Not a monetarily but a software security one. Veracode’s State of Software Security 2024 study reports that over three out of four (76%) financial organizations have security debt,…
Read More >
Cybereason Trustwave
Strength in Numbers: How the Trustwave-Cybereason Merger Elevates Cyber Resilience in an Era of Escalating Threats
November 15, 2024
Cybersecurity works best when it works together. This is the philosophy behind the announced merger agreement between Cybereason and Trustwave. The companies' leadership realizes the cyber threat landscape is more dangerous than ever. Threat actors,…
Read More >
Proofpoint Normalyze DSPM
Proofpoint Expands Human-Centric Security with Normalyze DSPM Acquisition
November 13, 2024
Ensuring data security and compliance is increasingly difficult as organizations adopt multi-cloud computing environments. Data can reside on a device, in a SaaS application, in cloud-based storage, and in other locations. Many users have access…
Read More >
Extrahop data breaches
Data Breaches Are More Costly Than We Thought—And Companies May Be Ill-Prepared
November 07, 2024
How much do data breaches really cost organizations? Are companies truly prepared to absorb the full extent of the costs associated with a data breach? New research from ExtraHop argues companies are not. The true…
Read More >
Subscribe for the Latest News

"*" indicates required fields

Consent*
This field is for validation purposes and should be left unchanged.
Webinars
NO POSTS