Every post answers the same three questions: what happened, why does it matter to you, and what is the one thing worth changing today.
The largest crypto theft on record: one compromised laptop, hot wallets on ten blockchains, a pre-signed EIP-7702 trick and a race against stablecoin freezes. What happened and what it teaches us.
Two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) allow code execution before any login. Who is affected, what experts say, and step-by-step remediation.
Ten days of silent lookups against Denmark's civil register went unnoticed until the bill arrived. What happened, who was involved, and the likely root cause.
Attackers with a stolen password now spam push notifications until someone taps Approve. How the trick works and what to switch on instead.
QR codes move the attack from a filtered work laptop to an unmanaged personal phone. A short guide to scanning safely.
Session cookies let attackers walk past your password and your MFA. What infostealer malware takes, and how to shut the door.
Voice cloning has made urgent payment requests far more convincing. Why a shared safe word beats trusting your ears.
What actually changes when you replace a password with a passkey — and why phishing stops working against it.
A calm checklist for the moment a company you used gets breached — in the order that actually reduces risk.
No briefings in that topic yet — more are on the way.
