Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
AI Security Poisoned memory affects future agent sessions and users. Enforce provenance, tenant isolation, write validation, expiry and reliable deletion.
AI Security An LLM gateway centralises keys, model routing and logs but becomes a critical trust point. Secure auth, tenants, retention, cache and fallback.
Cloud, Infrastructure and DevSecOps Microsoft 365 is the heart of most companies — and the top target of account attacks. Ten configurations that close common takeover paths.
Cybersecurity History In 2010 the world discovered a landmark cyberweapon: code that damaged Iranian centrifuges while showing operators normal readings. The Stuxnet story and its lessons for OT security.
AI Security An agent test harness measures prompt injection, tool abuse, memory poisoning, exfiltration and cost loops. Build scenarios, oracles and CI gates.
AI Security Coding agents install packages, run scripts and publish changes. Secure dependencies, CI identities, provenance, reviews, tests and secrets.
Human Security A campaign impersonating mObywatel uses sender spoofing and a fake 200 PLN fine. We explain why it looks so convincing and how not to fall for it.
AI Security Trace models, workflows and tool calls with OpenTelemetry. Design spans, metrics, content redaction, retention and security alerts for AI agents.
AI Security Model routers optimise cost and quality but can change region, retention and safety. Enforce data-class policy and test downgrade and fallback paths.
Human Security BEC is one of the most expensive scams for companies. We explain how invoice fraud and the 'urgent CEO transfer' work — and how to stop them.
Cybersecurity History In 1966, a simple program posing as a psychotherapist made people confide in him as if they were a human being - even though he didn't understand anything. The story of ELIZA and the effect that explains today's AI.
Cybersecurity History In 2016, the Mirai botnet compromised hundreds of thousands of IoT devices with default passwords and cut off Twitter, Netflix and Reddit in a single attack. The history of the cam army and its creators.
Careers and Certifications OSCP+, PNPT and CPTS differ in format, time, reporting and technical emphasis. Compare practical exams and choose the right pentester path.
AI Security Issues, comments and build logs can hijack pipeline agents. Separate untrusted content from secrets, write access, merges and artifact publishing.
Threats and Incidents A ransomware attack on Conduent exposed data on 62M+ people. What it says about third-party risk and what to do when a processor holds your data.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
