1. Why the PeopleSoft Victims Were Scanned and Not Chosen

    ShinyHunters found exploitable PeopleSoft servers by scanning the internet for reachable instances. With no fix available until after the attacks began, exposure determined the victims.

  2. Reading the 2026 DBIR Beyond the Patching Headline

    Everyone is quoting the DBIR's headline stat about vulnerability exploitation. The findings that should change how you prioritise are further in.

  3. CISA's New Patching Directive and Why It Matters

    CISA's BOD 26-04 ditches CVSS-based patching for a risk-based model. Here's what it means if CISA doesn't govern you.

  4. How to Outwit Attackers with Cyber Deception

    What a magician's toolkit can teach you about keeping attackers away from what matters.

  5. Create a Software Bill of Materials (SBOM)

    Creating a list of installed software and their version numbers

  6. How does Public Key Cryptography work

    A high-level description of public key cryptography

  7. Certutil.exe - Undocumented Switches

    Certutil.exe - Undocumented Switches

  8. Private Key Compromise

    Private Key Compromise

  9. Hotspot Shield VPN

    Hotspot Shield VPN

  10. my1login.com First Impressions

    my1login.com First Impressions

  11. Unique Memorable Passwords

    Unique Memorable Passwords

  12. The take-anywhere Password Manager

    The take-anywhere Password Manager

  13. Creating an SSL certificate - step by step

    Creating an SSL certificate - step by step

  14. Server Gate Cryptography secrets

    Certification Authorities (CAs) offer two types of SSL certificate, but which should you use?

  15. Domain Renewal Scam

    Domain Renewal Scam