News
Threat notes, advisories, and quick analysis. Newest first.
Weekly Threat Roundup — 2026-02-11
A quick scan of what mattered this week: phishing trends, credential stuffing, and patch reminders.
Advisory: Dependency Confusion Still Shows Up in CI
Why dependency confusion remains a real issue and how to eliminate the common root causes.
How We Triage CVEs (Without Panic Patching)
A sane triage workflow that prioritizes exploitable risk instead of raw CVSS scores.
Incident Note: SSO Misconfiguration Patterns
Common SSO and SAML misconfigurations we keep seeing — and how to validate your setup.
Ransomware Response: The First 24 Hours
A practical checklist for the first day of a ransomware incident: containment, evidence, comms, and recovery.
Browser Security Changes to Watch This Quarter
Cookie tightening, mixed content enforcement, and what web apps should test now.
Cloud Exposures: The 5 Most Common Causes
Misconfigured storage, permissive IAM, and forgotten assets are still the top drivers of cloud exposure.
MFA Fatigue: How Push-Spam Attacks Work
A short explainer on push MFA fatigue attacks and how to reduce the risk with simple changes.
Supply Chain Attacks: A Quick Primer
Where supply chain attacks happen (source, build, dependencies) and what defenses are most effective.
Alert Fatigue: How to Tune for Signal
If everything is urgent, nothing is. Here's a fast path to higher signal alerts.