• Charles J. Kolodgy
    Contributing Writer

    Charles J. Kolodgy is a security strategist, visionary, forecaster, educator, historian, and advisor. He is a thought leader, identifying trends and concepts critical to cybersecurity, with a primary focus on the human element. He has spoken at major conferences and written numerous documents.

    Charles is presently the Principal at Security Mindsets LLC and an Adjunct Professor at Rivier University.

Articles by Charles J. Kolodgy
browser security Menlo Security
How GenAI and Phishing-as-a-Service Are Transforming Cyber Threats in 2025
April 07, 2025
The enterprise web browser as the primary battleground for cybercriminals is the underlying theme of Menlo Security’s State of the Browser Security report. The report highlights the trends around attacks concentrated on exploiting web browser…
Read More >
X Twitter DDoS Elon Musk
X Marks the Target for Massive DDoS Attack
March 27, 2025
“There was (still is) a massive cyberattack against X,” was posted by Elon Musk on March 10, 2025. The attack had multiple waves as reported by Downdetector. The attack focused on U.S. and U.K. users.…
Read More >
military defense infostealers
U.S. Military and Defense Contractors Facing Unprecedented Cybersecurity Breach
March 21, 2025
A significant number of data breaches occur when cybercriminals walk through the “front door” using stolen credentials. According to a study from Hudson Rock, the login information is acquired using infostealer malware. Cybercriminals package the…
Read More >
Salt Typhoon
Salt Typhoon Exploits Seven-Year-Old Flaw to Breach Major U.S. Telecoms
March 13, 2025
In late 2024, it was confirmed that a cyber espionage campaign perpetrated by a highly sophisticated Chinese-based threat actor infiltrated at least eight major telecommunications companies. The attacks gained access to Call Detail Records used…
Read More >
Paris ethical AI Action Summit
Divergent Paths Emerge as US and UK Decline AI Action Summit Declaration
March 04, 2025
The AI Action Summit in Paris during the second week in February 2025 was a departure on how the international community is approaching artificial intelligence (AI). The two previous international summits concentrated on AI safety…
Read More >
DeepSeek China national security
Congress Targets China’s DeepSeek AI in New National Security Bill
February 25, 2025
DeepSeek, the Chinese-based artificial intelligence (AI) company, shocked the world when it released its R1 large language model (LLM). This new AI offering disrupted the established AI LLM market. However, there have been immediate worldwide…
Read More >
Halcyon ransomware
The Rise of RansomHub and Geopolitical Risks
February 11, 2025
Military strategist Sun Tzu wrote over 2000 years ago that it is critical to understand your adversary. This concept is why anti-ransomware platform provider Halcyon publishes their "Ransomware Malicious Quartile (MQ) Power Rankings." They released…
Read More >
Gravatar cloud credential harvesting
Cloud App Impersonations and the Rise of Sophisticated Credential Harvesting
February 04, 2025
There are no safe spaces on the internet. Cybercriminals will exploit any and every opportunity to launch attacks. This has been demonstrated again by researchers at SlashNext, who have uncovered a new credential harvesting campaign.…
Read More >
AppLite Trojan Zimperium
Dream Jobs or Digital Traps? AppLite Trojan Attacks Mobile Job Seekers
January 28, 2025
Finding a good job is difficult. This is why cybercriminals use job recruitment offers to trick people into downloading malicious Android mobile applications pretending to be job application software. Zimperium’s zLabs uncovered a new variant…
Read More >
VSPC Veeam vulnerabilities
Critical Flaws in Veeam Service Provider Console Demand Urgent Action
January 17, 2025
Veeam, a provider of data replication and protection software, released critical security patches to fix severe vulnerabilities affecting its Service Provider Console (VSPC). One of the vulnerabilities is rated as critical (9.9/10 on the CVSS…
Read More >
CISA CWE Top 25 vulnerabilities
Breaking Down the 2024 CWE Top 25: Addressing the Most Dangerous Software Weaknesses
January 10, 2025
A new year is a time for reflection. Looking at what happened in the prior year and setting goals for the future year. This applies to all activities, including software weaknesses. The Cybersecurity and Infrastructure…
Read More >
needrestart Ubuntu Linux
Decade-Old Vulnerabilities in Ubuntu's 'needrestart' Utility Exposed
December 29, 2024
“How did I not see that?” is the refrain when something new is discovered after the fifth watching of a movie. Software security vulnerability researchers also have those moments. For over a decade, five critical…
Read More >
Smokeloader
Old Exploits, New Threats: How SmokeLoader Continues to Haunt Vulnerable Systems
December 18, 2024
What is old is new again. That could be the mantra for cybersecurity vulnerabilities. The focus is on discovering new vulnerabilities before attackers can use them, but according to an August 2023 cybersecurity advisory published…
Read More >
Silverfort Rezonate identity security
Silverfort Strives to Redefine Identity Security with Rezonate Acquisition
December 05, 2024
Two companies that are former Gartner Cool Vendors and who share a similar vision to drastically improve identity security are now one entity. Silverfort, a growing identity security company, acquired Rezonate, a provider of identity-first…
Read More >
email fraud cyber insurance
The Rising Threat of Email Fraud: How Businesses Can Stay Ahead of Cybercriminals
November 29, 2024
It's 4:48 pm on the Friday before a long weekend, and you have just received an email from the CEO requesting immediate payment or an important deal will fall through. This could be genuine, but…
Read More >
security debt application security financial
Mounting Security Debt Is Putting Financial Services at Risk
November 22, 2024
Many financial institutions have a debt problem. Not a monetarily but a software security one. Veracode’s State of Software Security 2024 study reports that over three out of four (76%) financial organizations have security debt,…
Read More >
Cybereason Trustwave
Strength in Numbers: How the Trustwave-Cybereason Merger Elevates Cyber Resilience in an Era of Escalating Threats
November 15, 2024
Cybersecurity works best when it works together. This is the philosophy behind the announced merger agreement between Cybereason and Trustwave. The companies' leadership realizes the cyber threat landscape is more dangerous than ever. Threat actors,…
Read More >
Proofpoint Normalyze DSPM
Proofpoint Expands Human-Centric Security with Normalyze DSPM Acquisition
November 13, 2024
Ensuring data security and compliance is increasingly difficult as organizations adopt multi-cloud computing environments. Data can reside on a device, in a SaaS application, in cloud-based storage, and in other locations. Many users have access…
Read More >
Subscribe for the Latest News
Webinars
Shadow AI: The Widening Governance Gap
Register Now
Frontier AI: The End of Human-Speed Cyber in Canada
Register Now
The Exposure Economics of Mythos
Register Now