Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Threats and Incidents Your passwords and data are almost certainly in some breach. How to check it safely, what a leak really means and what steps to take.
Governance and Compliance Employees use several times more applications than IT has approved. Where shadow IT comes from, what it risks and how to control it without bans.
Human Security A fake parcel-fee text leads to card or banking phishing. Learn how to inspect the domain, authorisation prompt and incident response.
Penetration Testing and AppSec A guide to the OWASP Top 10 for teams that want to understand real risks — from broken access control, through injection, to SSRF.
Vulnerabilities and CVEs The scanner is the easy part. How to build the full process: inventory, risk-based prioritisation, remediation SLAs and metrics that matter.
Supply Chain Security Pickle, SafeTensors, ONNX, and AI checkpoints explained: prevent code execution and build a controlled, verifiable model supply-chain pipeline.
Cloud, Infrastructure and DevSecOps Most cloud breaches don't come from the provider's flaws, but from the customer's misconfiguration. Here are the five most common traps.
Supply Chain Security In May 2026 the Mini Shai-Hulud worm hit npm and PyPI at once, stealing CI/CD secrets. We analyse the attack and how to harden your pipeline.
Human Security Your phone knows more about you than your computer. Twelve practical settings and habits that genuinely protect your data, accounts and privacy.
AI Security Confidential computing for AI explained: understand TEEs, remote attestation, key release, trust boundaries, deployment patterns, and real limits.
Human Security Remote work is here to stay — and with it company data on home networks and private hardware. A practical standard: devices, access, Wi-Fi.
AI Security Understand model extraction, membership inference, inversion, and training-data leakage, then build layered protection for AI models and data.
Human Security Impersonations of OLX and Vinted are among the most reported scams in Poland. We explain the 'safe payment' mechanism that actually robs the seller.
Penetration Testing and AppSec Insecure deserialization in Java, .NET, and Python: identify trust boundaries, test without unsafe gadget chains, and remove the root cause of RCE.
Penetration Testing and AppSec Active Directory is the top target once inside a network. We cover common attack paths — Kerberoasting, excessive privileges — and how to close them.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
