Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Vulnerabilities and CVEs PTC released critical fixes for additional Windchill and FlexPLM versions on 14 July. Review affected releases, web-shell IOCs and a safe PLM patching plan.
Vulnerabilities and CVEs SAP’s July update fixes critical flaws in NetWeaver, Approuter and Commerce Cloud. Understand the 9.9 risk, patch order and the evidence needed to close remediation.
Threats and Incidents Authorities warn that Russian actors are exploiting poorly secured routers. Review the observed risk, hardening priorities and an evidence-led edge-device checklist.
AI Security Muse Image could reference public Instagram accounts when generating images. We examine Meta's reversal and the lessons for AI products using customer data.
AI Security How to audit LLM, RAG and AI agent security: scope, prompt injection, data controls, tools, reporting, remediation and retesting.
AI Security Understand AI Act roles, risk classes, the 2026–2028 timeline, AI literacy, transparency, documentation, human oversight and cybersecurity.
Penetration Testing and AppSec How professional web application penetration testing works: scope, OWASP methodology, reporting, retesting, pricing and vendor selection.
AI Security AI red teaming methodology for LLMs, RAG and agents: scope, attack scenarios, metrics, safe execution, reporting and differences from a classic pentest.
Penetration Testing and AppSec A practical API penetration testing checklist for REST, GraphQL, OAuth, JWT, BOLA, access control, rate limits, business logic, reporting and retesting.
AI Security MCP security guide covering prompt injection, tool poisoning, OAuth, token theft, permissions, sandboxing and testing Model Context Protocol servers.
Penetration Testing and AppSec A practical mobile app penetration testing guide covering Android, iOS, MASVS, MASTG, backend APIs, preparation, reporting and retesting.
AI Security Artificial intelligence has lowered the entry barrier for attackers. Zero-bug phishing, voice deepfake, polymorphic malware, and automated reconnaissance - how it works.
Penetration Testing and AppSec A practical OWASP ASVS 5.0 guide covering L1–L3, versioned requirements, evidence, procurement, testing and implementation across a secure SDLC.
AI Security A practical guide to all OWASP Top 10 for LLM Applications 2025 risks, with attack examples, controls and tests for RAG systems and AI agents.
Penetration Testing and AppSec How much does a penetration test cost in 2026? Compare pricing factors, realistic scopes, deliverables and quotes without choosing a misleading bargain.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
