IDScan.net sat breached for over a year, exposing 153 million driver’s licences belonging to customers of Hertz, Target, FedEx and dozens of other household names, none of whom had their own networks touched.
Read More
SANS 2026 Report: AI Is Now the #2 Human Cyber Risk SANS Institute's 11th annual Security Awareness & Culture Report, based on over 1,700 practitioners worldwide, shows AI has jumped...
Read More
WhatsApp rolled out stronger passwords, multi-device passkeys, and new scam-call warnings on Android. Here’s the short version of what changed and what to check.
There’s no such thing as “ISO 27001:2026,” but plenty changed anyway. Here’s what the 2025 deadline, the revised ISO 27000 overview, and tightening POPIA enforcement actually mean for South African SMBs.
I ran 500 automated attacks against an on-prem AI. The grandma attack passed nearly half the time. A few weeks ago I published the results of a manual red team...
Read More
Microsoft is retiring SMS and voice-based MFA in Entra ID by February 2027, with passkeys becoming default from September 2026. Here’s what it means for SMEs still running legacy MFA and what to do before the deadline
A small consultancy built an internal time tracking application. React frontend, Supabase backend, hosted on Cloudflare Workers. Built quickly, using modern tooling, to solve a real problem. Before opening it...
Read More
Most companies deploying AI assistants have never tested them. Not once. They have read the vendor's safety documentation, maybe watched a demo, and decided the guardrails are good enough. This...
Read More
On 9 December 2025, OWASP published the Top 10 for Agentic Applications 2026. It is the first peer-reviewed, industry-standard security framework for AI systems that do not just respond to…
There is a sentence that appears in nearly every annual pentest report I have read in the last five years. It sits near the front, usually in italics, and it…