Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Governance and Compliance The ministry proposes supplier certification, minimum safeguards, patient alerts and new duties for large-scale health-data processors.
Identity and Access The free sandbox provides a demo mObywatel Europa app and identity verifier. We explain useful test cases, privacy choices and failure modes.
Cloud, Infrastructure and DevSecOps A new government recommendation calls for segmentation, MFA, configuration backups and monitoring. We translate it into service resilience.
Human Security The eighth Cybersecurity Forum and European Cybersecurity Month begin on 30 September. Here is a practical plan for staff and management.
Governance and Compliance Essential and important entities have until 3 October to apply for Poland's KSC register. Here is what to verify and what comes next.
Identity and Access S46 supports European eID through login.gov.pl. We explain what this means for foreign representatives and how to govern their access.
Human Security CERT Polska linked 852 Meta ads to 17 Google Play apps in a toll-fraud operation. We explain the risk and actions for users and employers.
Governance and Compliance Reporting duties for actively exploited vulnerabilities and severe product incidents are already in force through ENISA's new platform.
Threats and Incidents Poland's data protection authority plans to inspect the Medyc software vendor while cybercrime police investigate. Here is what is known and what to do next.
Vulnerabilities and CVEs A two-flaw RouterOS chain gave full control over devices exposing SSH. Patching, compromise assessment and trusted recovery all matter.
Governance and Compliance BCX found no evidence of live production compromise but continues to assess legacy information. It is a practical lesson in test data and retention.
Supply Chain Security New guidance explains how operators should control integrator remote access, ICS documentation, contracts and the ability to operate independently.
AI Security DIVD isolated its infrastructure and began forensics. We separate confirmed facts from an early AI hypothesis and explain the response lessons.
Threats and Incidents The attack disrupted services and may involve identity and contact data. We explain practical steps for individuals, IT teams and leadership.
Human Security Astrana Health deemed an incident material after a social-engineering campaign. We explain why caller ID is not identity verification.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
