IDScan.net sat breached for over a year, exposing 153 million driver’s licences belonging to customers of Hertz, Target, FedEx and dozens of other household names, none of whom had their own networks touched.
Read More
SANS 2026 Report: AI Is Now the #2 Human Cyber Risk SANS Institute's 11th annual Security Awareness & Culture Report, based on over 1,700 practitioners worldwide, shows AI has jumped...
Read More
WhatsApp rolled out stronger passwords, multi-device passkeys, and new scam-call warnings on Android. Here’s the short version of what changed and what to check.
There’s no such thing as “ISO 27001:2026,” but plenty changed anyway. Here’s what the 2025 deadline, the revised ISO 27000 overview, and tightening POPIA enforcement actually mean for South African SMBs.
Microsoft is retiring SMS and voice-based MFA in Entra ID by February 2027, with passkeys becoming default from September 2026. Here’s what it means for SMEs still running legacy MFA and what to do before the deadline
On 9 December 2025, OWASP published the Top 10 for Agentic Applications 2026. It is the first peer-reviewed, industry-standard security framework for AI systems that do not just respond to…
There is a sentence that appears in nearly every annual pentest report I have read in the last five years. It sits near the front, usually in italics, and it…
Joint Standard 2 of 2024, the FSCA and Prudential Authority's cybersecurity and cyber resilience standard, commenced on 1 June 2025. Financial institutions were afforded 12 months from that date to...
Read More
Sitting in Cape Town’s Silo District, it is clear that many businesses are building digital silos that hide massive security gaps. From missing DMARC records to the “MSP illusion,” I deep-dive into why SMEs need forensic expertise and not junior grunt work to safely unlock the power of AI and scale toward ISO readiness.