Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
AI Security Technical DeepSeek V4 Pro and Flash analysis: 1.6T/49B and 285B/13B, compressed attention, mHC, Muon, 1M context, MIT licence and deployment.
Cloud, Infrastructure and DevSecOps Secure Terraform from module to apply: provider supply chain, state and plan data, CI identity, policy as code, drift, detection and testing.
AI Security Technical GPT-5.5 analysis: agentic coding, Terminal-Bench 2.0, SWE-Bench Pro, computer use, GB200/GB300 inference and High safeguards.
Identity and Access Stolen personal data lets criminals take out loans or register a company in your name. How identity theft happens and how to protect yourself.
AI Security Deploying language models opens up a class of threats that classic applications never knew. We cover prompt injection, data leakage and over-privileged agents.
Cloud, Infrastructure and DevSecOps A technical container-escape model without exploit payloads: namespaces, capabilities, seccomp, AppArmor, OCI runtime, detection and hardening.
Vulnerabilities and CVEs CVE-2026-35616 in FortiClient EMS is actively exploited and listed in CISA KEV. Check affected releases, the hotfix and investigation steps.
Cloud, Infrastructure and DevSecOps Audit Kubernetes RBAC safely: bind, escalate, impersonate, ServiceAccounts, pod subresources, audit detection, admission and hardening.
Penetration Testing and AppSec A technical LAN and segmentation pentest methodology covering flow matrices, Active Directory, IPv6, detection, hardening and safe evidence.
Cloud, Infrastructure and DevSecOps Test AWS IAM privilege escalation safely: policy evaluation, PassRole, trust policies, CloudTrail detection, least privilege and remediation.
Vulnerabilities and CVEs CVE-2026-33827 is a network race condition in Windows TCP/IP. Review confirmed scope, attack conditions and a defensible patching plan.
Governance and Compliance A small company doesn't need a security department to stop being an easy target. A 90-day plan: what to do in-house, what to buy, what to outsource.
Vulnerabilities and CVEs CVE-2026-32201 scores 6.5 but appears in CISA KEV. Check affected SharePoint Server editions and follow a defensible response plan.
Identity and Access Change your password every 30 days? Invent complex character strings? We explain which password rules are outdated myths and what really protects your accounts.
Vulnerabilities and CVEs Technical BlueHammer analysis: Defender local privilege escalation, safe PoC boundaries, KEV status, platform versions, hunting and remediation.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
