The three goals every security control serves: keep data secret, correct and available.
The playbooks organisations use to decide what to protect and how.
Most breaches start with a message, not a hack.
Encrypt everything, steal a copy, then demand payment twice.
Trojans, worms, stealers, RATs: know what you're looking at.
A bug the vendor has had zero days to fix.
CVE, CVSS, EPSS, KEV: how teams decide what to fix first.
Why break in when you can ship inside a trusted update?
Your data is probably already out there. Here's what that means.
Patient, well-funded and usually after secrets, not ransom.
Knock a site offline by drowning it in traffic.
Deepfakes, prompt injection and AI-powered defence.
Most cloud breaches are misconfigurations, not clever hacks.
Identity is the new perimeter.
When hacking moves from data to the physical world.
Talk to the database directly through a login box.
Make someone else's browser run your code.
Change one number in the URL and see someone else's data.
IP addresses, ports, DNS: the map every attacker and defender uses.
Locks, keys and fingerprints for data.
Most servers and most security tools live here.
Where most cyber careers start.
What to do in the worst hour of the year.
Finding out a lot from what's already public.