TL;DR Invisible instructions, real security risks: ASCII smuggling uses hidden Unicode characters to conceal malicious instructions in content processed by AI assistants. Trusted access can become an attack pathway: Prompt injection can manipulate AI assistants into performing unauthorized actions…
Cyberattacks do not always begin with malware. Sometimes they start with a job application. Sometimes with a trusted account. And increasingly, they may involve an AI agent operating with access that was originally intended for something much more routine. In Episode 389 of The 443: Security…
In Episode 378 of The 443 Security Simplified, Marc Laliberte and Corey Nachreiner examine lessons from a recent CISA security incident, a vulnerability affecting the Amazon Q Developer extension for Visual Studio Code, and Microsoft research into a destructive malware platform known as Giga Wiper…
What happens when AI makes Waterfall agile? A few weeks ago, I was sitting with one of our engineering VPs while he walked me through his workflow in Cursor. Before writing a single line of code, he spent a meaningful amount of time using Cursor to craft a feature specification, a detailed natural…
Vulnerability management has never been just about finding flaws. It is about understanding which flaws matter most, which ones attackers are likely to exploit, and which ones security teams need to prioritize before they become a real business risk. That is why CVEs, CVSS scores, and vulnerability…
Artificial intelligence, exposed edge devices, and vulnerability disclosure are colliding in ways that security teams can no longer treat as separate risks. In Episode 375 of The 443: Security Simplified, WatchGuard’s Marc Laliberte and Corey Nachreiner unpack three timely cybersecurity stories: the…
Cybersecurity across the Asia-Pacific region is becoming more complex, more urgent, and more business-critical. Small and midsized businesses are no longer asking whether they need stronger security. Increasingly, they are asking how quickly they can improve it, how much risk they can realistically…
TL;DR The time between vulnerability disclosure and active exploitation is shrinking. In episode 372 of The 443 Security Simplified, WatchGuard’s Marc Laliberte and Adam Winston discuss why the traditional patch window is becoming harder for defenders to rely on. The episode also examines a recent…
Cybersecurity across Asia-Pacific is entering a more complex phase. Organizations are facing pressure from multiple directions at once, including evolving threat actors, expanding compliance expectations, hybrid work, cloud adoption, AI usage, and growing accountability at the board level. For small…
WatchGuard SOC analyst report on geopolitical cyber risks to critical infrastructure, with guidance to reduce exposure across OT environments.