Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Governance and Compliance Europol identifies gaps in digital forensic tools, standards and skills. For organisations, the practical lesson is to preserve evidence before remediation destroys the timeline.
Cloud, Infrastructure and DevSecOps GitHub now requires larger new RSA keys and supports hybrid post-quantum key exchange. Teams should find legacy SSH clients before the scheduled brownouts.
Threats and Incidents Microsoft and Health-ISAC seized domains supporting a phishing ecosystem linked to more than one billion malicious messages. Here is what people and organisations should do next.
Governance and Compliance CERT Polska has published crisis-communication guidance. We turn it into a practical plan for the first statement, roles, channels and updates.
Vulnerabilities and CVEs NordVPN for Windows before 8.12 inadequately protects a named pipe. We explain the impact and a safe endpoint update plan for organisations.
Human Security CERT Polska warns of emails claiming a JPK_VAT discrepancy. The link opens a fake webmail login rather than an official Polish tax service.
Vulnerabilities and CVEs CISA confirms exploitation of a critical Jira, Confluence, Bitbucket and Data Center flaw. Check fixed versions, logs and exposed secrets.
Human Security Mozilla has fixed dozens of issues, including sandbox escapes and use-after-free flaws. Here is what people and organisations should do next.
AI Security Google Cloud is simplifying perimeters for folders, private endpoints and exceptions. Here is how organisations can constrain AI agent data access.
Governance and Compliance CISA's new model combines exposure, active exploitation, impact and evidence review. We show how organisations elsewhere can use the sequence.
Vulnerabilities and CVEs A critical email gateway flaw enables file write and root command execution. We explain which systems are exposed and how to respond safely.
Vulnerabilities and CVEs Palo Alto Networks has observed limited exploitation of a flaw that yields root on a firewall. Review panel exposure, releases and configuration integrity.
AI Security Anthropic studied model deployment and replication under simplified conditions. Review device ownership, network access and authority to run AI workloads.
Supply Chain Security Docker disclosed a PAT transfer flaw in account conversion. Review the notice's scope, automation owners and evidence of container image provenance.
Vulnerabilities and CVEs MSRC proposes risk cohorts for update analysis. Organise exposure questions, preserve individual CVE assessment and give each remediation decision an owner.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
