ClickFix in 2026: Trust-Flow Patterns, Named Variants, and What Stops Them
Updated April 2026 - The trust-flow patterns behind ClickFix, the variants and vectors carrying it, and the defences that work
When AI Writes the Code, Who Catches the Bugs?
In December 2025, Boris Cherny, creator of Anthropic's Claude Code, revealed he hadn't opened an IDE
Hacktivist DDoS Attacks: A Defender's Guide
NoName057(16) has targeted 3,700+ hosts in thirteen months. Their playbook is predictable: strike during elections, holidays, and geopolitical flashpoints. Here's what the La Poste attack reveals about defending against hacktivist DDoS.
14 Crypto Scams to Watch For in 2026
Cryptocurrency scam losses reached $9.3 billion in the United States alone in 2024, a 66% increase from the previous
MongoBleed Exploit: The MongoDB Memory Leak Hitting 87,000 Servers
Updated January 10, 2026: CISA's remediation deadline for federal agencies is January 19. Ubuntu has retracted its claim
Prompt Injection Attacks: Examples, Techniques, and Defence
Updated July 2026: Added Unit 42 and Google telemetry on web-based injection observed in the wild, plus a prompt
Building a Second Brain for Cybersecurity Work
Sixty-five percent of security professionals report their job has become harder in the past two years (ISSA/ESG, 2024)
What is CTEM? Why Vulnerability Management Misses the Attack Surface
Most breaches do not start with a vulnerability. CTEM helps answer the question patching alone cannot: what can an attacker still reach in your environment right now?
npm Security Risks: Most Vulnerable Packages in 2026
Updated April 2026
In 2025, attackers published 454,648 malicious npm packages. That’s nearly half a million in a
Cybersecurity Career Paths: How to Choose Your Specialisation and Advance in 2026
Updated April 2026
59% of organisations report critical or significant cybersecurity skills gaps (ISC2, 2025). The constraint is not headcount:
