Device code phishing gets victims to complete MFA on the genuine sign-in page while the attacker collects the tokens. Here is how the technique works, why passkeys alone do not stop it, and five steps to take this week.
Prompt injection cannot be fully prevented, so the safer question is what a fooled assistant can reach and where it can send it. Here is how to close the exits, with a checklist for this week.
A single incident can trigger GDPR, NIS2, DORA and Swiss reporting deadlines at once, each with its own trigger and recipient. Here is how they compare and what to prepare this week.
Attackers posing as IT support are using passkey and MFA updates as a pretext to take over cloud accounts. The weak point is method registration and recovery. Here is how to harden it and what to check this week.
Since 11 September 2026, the EU Cyber Resilience Act requires manufacturers to report actively exploited vulnerabilities and severe incidents within 24 hours. Here is what applies and what to prepare.
The safest useful answer is the one the person asking is already authorized to receive
Tell us about your organization and security needs. Our team will get in touch to explore the right solution for you.
