Author: Robert Timlick

״Defenders think in lists, attackers think in graphs,” said John Lambert from Microsoft, distilling the fundamental difference in mindset between those who defend IT systems and those who try to compromise them.
The traditional approach for defenders is to list security gaps directly related to their assets in the network and eliminate as many as possible, starting with the most critical.

A high-severity flaw impacting the LiteSpeed Cache plugin for WordPress is being actively exploited by threat actors to create rogue admin accounts on susceptible websites.
The findings come from WPScan, which said that the vulnerability (CVE-2023-40000, CVSS score: 8.3) has been leveraged to set up bogus admin users with the names wpsupp‑user 

Mayor Ted Wheeler proposed his 2024-25 draft budget of $8.2 billion – $1 billion more than last year’s budget.

A local developer is planning to build 65 new single-family homes in Washington County.

She’s played several key roles on national and state legislative fronts.

Bambuza Hospitality is closing its South Waterfront location but is looking to expand in downtown Portland.

Portland Business Journal Publisher and President Candace Beeke recently asked women leaders to talk about bold moves and breakthroughs that changed or advanced their careers. Read what Lora Kyle, vice president, Talent Development, Chegg Inc.; Katherine Lam, president and CEO, Bambuza Hospitality Group; Dr. Laurel Soot, chief medical officer, Providence Health Plan; Summer Widmer, vice president, producer, Alliant Insurance Services; and Karen Williamson-Gracey, director of account services, Providence…

The U.K. National Crime Agency (NCA) has unmasked the administrator and developer of the LockBit ransomware operation, revealing it to be a 31-year-old Russian national named Dmitry Yuryevich Khoroshev.
In addition, Khoroshev has been sanctioned by the U.K. Foreign, Commonwealth and Development Office (FCD), the U.S. Department of the Treasury’s Office of Foreign Assets Control (

The Iranian state-backed hacking outfit called APT42 is making use of enhanced social engineering schemes to infiltrate target networks and cloud environments.
Targets of the attack include Western and Middle Eastern NGOs, media organizations, academia, legal services and activists, Google Cloud subsidiary Mandiant said in a report published last week.
“APT42 was

The MITRE Corporation has offered more details into the recently disclosed cyber attack, stating that the first evidence of the intrusion now dates back to December 31, 2023.
The attack, which came to light last month, singled out MITRE’s Networked Experimentation, Research, and Virtualization Environment (NERVE) through the exploitation of two Ivanti Connect Secure zero-day