Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
AI Security A model is only as reliable as the data it learns from and consumes. Poisoning training sets, fine-tuning and RAG indexes - how it works and how to defend AI integrity.
Threats and Incidents Run a tabletop exercise that exposes response gaps without disrupting production. Design scenarios, injects, decisions and corrective actions.
Threats and Incidents Compare SIEM, XDR and EDR across telemetry, detection, retention, response and cost, then design an architecture without duplicate alerts and data.
Penetration Testing and AppSec Vulnerability disclosure and bug bounty programs differ. Design safe harbor, scope, triage, SLAs, rewards and a responsible launch process.
Penetration Testing and AppSec Plan a cloud pentest within provider rules. Scope IAM, storage, networks, Kubernetes, serverless, CI/CD, logging and safe rules of engagement.
AI Security A call from the president, whose voice agrees - but it's not the president. How voice cloning and deepfake videos work in attacks on companies and how to defend yourself using procedure, not intuition.
Governance and Compliance EASM discovers unknown domains, IPs, cloud and services. Build a repeatable process for discovery, ownership, risk prioritisation and remediation.
Penetration Testing and AppSec Memory-safe languages remove major vulnerability classes. Learn how to prioritise components, control FFI risk and plan a practical Rust migration.
Threats and Incidents Cyber threat intelligence turns threat data into decisions. Build requirements, sources, analysis, distribution and metrics for an effective CTI loop.
AI Security How to implement AI in your company without chaos or risk — from use case selection through data and security to pilots, ROI and scaling. A practical guide.
Cybersecurity History In 2017, NotPetya exited a Ukrainian accounting program and paralyzed global corporations, causing $10 billion in losses. The story of a weapon that only pretended to be a ransom.
Penetration Testing and AppSec Secure by Design puts security outcomes on manufacturers. Apply CISA principles through safe defaults, transparent metrics and product governance.
Threats and Incidents A SQL injection reached guest data held for thousands of Polish hotels. Learn what reportedly leaked, why authenticated access is no defence and how guests, hotels and SaaS providers should respond.
Identity and Access PAM reduces risks from administrator accounts, secrets and sessions. Learn how to deploy JIT access, session control and meaningful metrics.
Threats and Incidents Purple teaming turns adversary techniques into measurable detection tests. Scope exercises safely, improve controls and prove the gaps are closed.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
