Week in Review: CrowdStrike exec apologizes, NIST changes password rules, corporate hack-for-hire practices