Zero Trust Five reasons to switch to ZTNA and zero trust: why companies have outgrown VPN How VPN attacks, growing infrastructure complexity, and regulatory requirements are all accelerating businesses’ shift to Zero Trust Network Access.
SIEM SIEM: which rules actually work in your infrastructure Your SIEM is installed and the rules are loaded. But do you know which rules are waiting for the right events, and which ones are just idling?
vulnerabilities PHP2Shell: what we know about the threat two weeks later Critical PHP vulnerabilities put millions of websites worldwide at risk, but there are still no reports of mass breaches. We discuss the attacks on PAN-OS, a flaw in Brotli, and the steps businesses need to take beyond patching.
AI Cyber Immunity lessons for AI agents How to apply Secure by Design ideas when rolling out AI agents.
TLS The eMudhra certificate incident: how organizations can respond How a certificate’s private key ended up being equal to 4, and why browser updates alone won’t protect you from vulnerable eMudhra certificates.
spam Technology that blocks spam domains in bulk Spammers automatically register hundreds of near-identical domains to fool security solutions. We can block those domains automatically, too.
vulnerabilities PHP Vulnerabilities: remote code execution threat PHP developers have released patches for two critical vulnerabilities that could allow an attacker to remotely execute arbitrary code on the server without authentication.
SMB How to avoid falling victim to hackers: a guide for SMBs People, processes, and technology: if a company has gaps in its defenses, they most likely come from one of these three areas. We walk through a real-world breach, and explain how to stand up to attackers without hiring a huge team or needing to vastly increase the security budget.
vulnerabilities Patches thick and fast: October bulletins from Microsoft and others Microsoft’s October Patch Tuesday bulletin is breaking records again — it addresses 1,414 vulnerabilities. Here’s what you need to know.
side-channel attacks InjectEave: unavoidable eavesdropping method We look at an unusual eavesdropping method that leverages the fundamental physical properties of electronic components.
Ransomware New ransomware trends: hijacking Active Directory instead of encrypting data In April, our experts investigated the PAYLOAD campaign — where the leverage wasn’t data encryption but a malicious AD group policy object.
AI The direct impact of “tokenomics” on cybersecurity processes We examine the impact of AI dependency on an organization’s cybersecurity.
vulnerabilities When a vulnerability isn’t closed for years — or why a vulnerability scanner is never enough A company may regularly use a vulnerability scanner, but dangerous vulnerabilities will still remain in its infrastructure. We explain why this happens, and what to do about it.
vulnerability WordPress arbitrary code execution vulnerability CVE-2026-87902, a new critical vulnerability in the WordPress core, is already being actively exploited in real-world attacks.
AI “Denial of wallet” as a new DDoS attack against AI agents What tokenomics is, and how the value of AI tokens has become a cybersecurity issue.
SMB Not just a box to check: how small and medium-sized businesses can turn cybersecurity into a growth driver We believe that investing in cybersecurity, like any other investment, should pay off. This post explains what a small company needs to make its security setup work for the business instead of staying a formality.
hardware vulnerabilities GPUThor: another server attack attempt through the GPU Researchers have demonstrated a partially effective Rowhammer attack on graphics accelerators.
files Exotic files: unexpected sources of cyberthreats We break down the file formats that can be unfamiliar to some users, and that aren’t always scanned by security solutions but can still pose cyberthreats.
malware A dangerous matryoshka: everything needed to be known about polyglot malware files Attackers are crafting files that devices can read as two different document types at once, and using these “nesting dolls” to smuggle in malware. How to detect and neutralize these two-faced files?
side-channel attacks Acoustic keylogging: have you heard the news? Japanese researchers have again tackled a classic high-tech espionage challenge: accurately identifying keystrokes based purely on how they sound.
AI Lessons from the Hugging Face breach caused by OpenAI agents An analysis of key characteristics of AI agent-driven cyberattacks, why open-source models are sufficient to execute them, and what measures can help defend an organization.