Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Vulnerabilities and CVEs A two-flaw RouterOS chain gave full control over devices exposing SSH. Patching, compromise assessment and trusted recovery all matter.
Governance and Compliance BCX found no evidence of live production compromise but continues to assess legacy information. It is a practical lesson in test data and retention.
Supply Chain Security New guidance explains how operators should control integrator remote access, ICS documentation, contracts and the ability to operate independently.
AI Security DIVD isolated its infrastructure and began forensics. We separate confirmed facts from an early AI hypothesis and explain the response lessons.
Threats and Incidents The attack disrupted services and may involve identity and contact data. We explain practical steps for individuals, IT teams and leadership.
Human Security Astrana Health deemed an incident material after a social-engineering campaign. We explain why caller ID is not identity verification.
Supply Chain Security A supplier zero-day exposed message content and attachments. We explain who should respond and how people and organisations can reduce the impact.
Human Security A new DOJ case shows how a crypto investment scam can develop over weeks or months. Learn the warning signs and what to do after sending money.
Threats and Incidents Bitget raised its estimate of transfers after the incident and published a withdrawal schedule. Here is what is known and how users can avoid follow-on scams.
Supply Chain Security Kiteworks received warning of a possible attack and advised a shutdown window. We explain what is known and how to balance security with business continuity.
Threats and Incidents A former soldier was sentenced for hacking, data theft and extortion. We explain why call history is sensitive and how to protect telecom accounts.
Threats and Incidents A fraudster impersonated a vendor and redirected invoice payments. The case shows how to prevent BEC and what to do immediately after a mistaken transfer.
Governance and Compliance The FTC is considering new platform duties for impersonation ads. It is not a final rule, but it matters to consumers, brands and advertisers now.
Threats and Incidents A Rydox operator has pleaded guilty. We explain how stolen data fuels further fraud and what individuals and organisations should do after a breach.
Vulnerabilities and CVEs CVE-2026-85102 and CVE-2026-93616 are being exploited against Check Point VPN gateways and management servers. Contain exposure, patch and hunt for compromise.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
