https://angelforce.eu/blog/ Practical cyber security articles from AngelForce: email security, web security, vulnerabilities, incident response, compliance and secure development. en https://angelforce.eu/blog/wordpress-security-checklist/ https://angelforce.eu/blog/wordpress-security-checklist/ Fri, 16 Oct 2026 08:00:00 GMT Twelve WordPress hardening steps in a sensible order, from updates and abandoned plugins to 2FA, XML-RPC, backups, file integrity and a WAF. WordPressWeb security https://angelforce.eu/blog/two-hour-incident-response-tabletop/ https://angelforce.eu/blog/two-hour-incident-response-tabletop/ Fri, 16 Oct 2026 08:00:00 GMT Run a two-hour ransomware or account-takeover tabletop with a small team, log the gaps, and turn them into a short runbook with named owners. Incident responseRansomware https://angelforce.eu/blog/security-headers-that-matter/ https://angelforce.eu/blog/security-headers-that-matter/ Fri, 16 Oct 2026 08:00:00 GMT A practical guide to CSP with nonces, HSTS and preload, frame-ancestors, Referrer-Policy, Permissions-Policy and COOP, with examples and what to drop. Web securitySecure development https://angelforce.eu/blog/security-checklist-before-connecting-data-to-ai-assistant/ https://angelforce.eu/blog/security-checklist-before-connecting-data-to-ai-assistant/ Fri, 16 Oct 2026 08:00:00 GMT A checklist for IT teams: data classification, hostile input, access control, logging, vendor review and ownership before connecting an LLM. Secure developmentCompliance https://angelforce.eu/blog/secure-file-uploads-design-and-testing/ https://angelforce.eu/blog/secure-file-uploads-design-and-testing/ Fri, 16 Oct 2026 08:00:00 GMT A checklist of controls for file upload features, based on the OWASP cheat sheet, with a table of tests to run against each upload endpoint. Web securitySecure development https://angelforce.eu/blog/passwords-and-passkeys-what-nist-recommends/ https://angelforce.eu/blog/passwords-and-passkeys-what-nist-recommends/ Fri, 16 Oct 2026 08:00:00 GMT NIST's current password rules explained - 15-character minimums, no forced rotation, breached-password checks - plus MFA strength and where passkeys fit. Identity and access https://angelforce.eu/blog/nis2-article-21-in-practice/ https://angelforce.eu/blog/nis2-article-21-in-practice/ Fri, 16 Oct 2026 08:00:00 GMT The ten NIS2 risk-management measures in Article 21 in practical terms, plus the Article 23 reporting deadlines of 24 hours, 72 hours and one month. Compliance https://angelforce.eu/blog/jwt-security-pitfalls/ https://angelforce.eu/blog/jwt-security-pitfalls/ Fri, 16 Oct 2026 08:00:00 GMT Common JWT mistakes - alg none, RS256 and HS256 confusion, weak HMAC secrets, missing claim checks, kid injection, revocation and storage - and the fixes. Secure developmentIdentity and access https://angelforce.eu/blog/how-to-spot-a-phishing-link/ https://angelforce.eu/blog/how-to-spot-a-phishing-link/ Fri, 16 Oct 2026 08:00:00 GMT Learn to read a URL like an attacker builds it - registrable domains, lookalike and punycode domains, the @ trick, open redirects, shorteners and new TLDs. Phishing https://angelforce.eu/blog/how-to-read-a-penetration-test-report/ https://angelforce.eu/blog/how-to-read-a-penetration-test-report/ Fri, 16 Oct 2026 08:00:00 GMT What a good penetration test report contains, how findings are rated, what to fix first, and how to tell a real test from a rebadged scan. Penetration testing https://angelforce.eu/blog/github-actions-hardening-plan-one-week/ https://angelforce.eu/blog/github-actions-hardening-plan-one-week/ Fri, 16 Oct 2026 08:00:00 GMT Five daily tasks for GitHub Actions: token permissions, action audits, script injection, secrets handling and workflow ownership. Secure development https://angelforce.eu/blog/first-24-hours-of-a-ransomware-incident/ https://angelforce.eu/blog/first-24-hours-of-a-ransomware-incident/ Fri, 16 Oct 2026 08:00:00 GMT Day one of a ransomware attack - containing it without losing evidence, credential resets, backup checks, GDPR and NIS2 deadlines, and whether to pay. Incident responseRansomware https://angelforce.eu/blog/eudi-wallet-login-security-questions/ https://angelforce.eu/blog/eudi-wallet-login-security-questions/ Fri, 16 Oct 2026 08:00:00 GMT Questions for municipalities and service providers on assertions, attributes and signing flows before they accept EUDI Wallet logins. Identity and accessCompliance https://angelforce.eu/blog/email-authentication-spf-dkim-dmarc/ https://angelforce.eu/blog/email-authentication-spf-dkim-dmarc/ Fri, 16 Oct 2026 08:00:00 GMT How SPF, DKIM and DMARC stop others sending email as your domain, how to move from p=none to p=reject safely, and the mistakes that break mail. Email securityPhishing https://angelforce.eu/blog/cyber-resilience-act-2026-preparation-plan/ https://angelforce.eu/blog/cyber-resilience-act-2026-preparation-plan/ Fri, 16 Oct 2026 08:00:00 GMT What software and hardware teams should set up before CRA obligations apply: development evidence, vulnerability handling, updates and documentation. ComplianceSecure development https://angelforce.eu/blog/cvss-epss-kev-prioritising-vulnerabilities/ https://angelforce.eu/blog/cvss-epss-kev-prioritising-vulnerabilities/ Fri, 16 Oct 2026 08:00:00 GMT Why a CVSS base score alone is a weak priority signal, how EPSS and the CISA KEV catalogue add threat context, and a simple order for patching. Vulnerabilities