Thoughtworks, a global technology consultancy integrating strategy, design and engineering to drive digital innovation, today released the fifth edition of Looking Glass, a report designed to help companies navigate industry shifts and identify new opportunities for growth. The report features five chapters, which the company calls ‘lenses’; each one is designed to help readers better analyse today’s most important technology trends.

GUEST RESEARCH: Trustwave, a leading cybersecurity and managed security services provider,  has released a series of reports detailing the threats facing the energy and utilities sector, which is increasingly targeted due to its critical role in supporting national and global infrastructures. 

GUEST RESEACH:  Microsoft patched a whopping 157 CVEs in its inaugural Patch Tuesday for 2025. Not only is this the largest number of CVEs patched in January, it is the largest number of CVEs patched across any Patch Tuesday release since 2017. Microsoft set a record in April 2024, patching 147 CVEs. Since 2017, the average number of CVEs patched in January was 60. Prior to 2025, the largest January Patch Tuesday release was 2023, which saw Microsoft patch 98 CVEs. In 2024, Microsoft opened the year with 48 CVEs patched. Please find below a comment from Satnam Narang, sr. staff research engineer at Tenable and a full analysis in this blog.

GUEST RESEARCH:  Infoblox Threat Intel researchers have discovered new insights into the use of spoofed domains in modern malicious spam (malspam) campaigns, sending unsolicited emails that contain harmful attachments or links designed to infect the recipient's computer with malware or to steal sensitive information. This reveals how threat actors exploit domain spoofing and how pervasive this technique is. The information was gathered through a collective effort following the initial Muddling Meerkat research, with various individuals sharing data showing Muddling Meerkat behavior with the researchers. This underscores the importance of collaborative efforts in cybersecurity, as sharing data and insights can lead to significant discoveries and improvements in threat detection and mitigation.