Blog (Page 2)
Practical security writing for people who run systems: what to fix, in what order, and why.
- All topics
- WordPress
- Web security
- Incident response
- Ransomware
- Secure development
- Compliance
- Identity and access
- Phishing
- Penetration testing
- Email security
- Vulnerabilities
-
EUDI Wallet logins: what to check before you accept them
Questions for municipalities and service providers on assertions, attributes and signing flows before they accept EUDI Wallet logins.
-
SPF, DKIM and DMARC explained - a safe path to p=reject
How SPF, DKIM and DMARC stop others sending email as your domain, how to move from p=none to p=reject safely, and the mistakes that break mail.
-
Cyber Resilience Act: a 2026 plan for product makers
What software and hardware teams should set up before CRA obligations apply: development evidence, vulnerability handling, updates and documentation.
-
CVSS, EPSS and KEV - how to prioritise vulnerabilities
Why a CVSS base score alone is a weak priority signal, how EPSS and the CISA KEV catalogue add threat context, and a simple order for patching.