The three goals every security control serves: keep data secret, correct and available.
The playbooks organisations use to decide what to protect and how.
Prevent, detect, correct: what each defence is for.
Most breaches start with a message, not a hack.
Encrypt everything, steal a copy, then demand payment twice.
Trojans, worms, stealers, RATs: know what you're looking at.
A bug the vendor has had zero days to fix.
CVE, CVSS, EPSS, KEV: how teams decide what to fix first.
Why break in when you can ship inside a trusted update?
Your data is probably already out there. Here's what that means.
Patient, well-funded and usually after secrets, not ransom.
Knock a site offline by drowning it in traffic.
Deepfakes, prompt injection and AI-powered defence.
Most cloud breaches are misconfigurations, not clever hacks.
Identity is the new perimeter.
When hacking moves from data to the physical world.
Talk to the database directly through a login box.
Make someone else's browser run your code.
Change one number in the URL and see someone else's data.
IP addresses, ports, DNS: the map every attacker and defender uses.
Bands, channels and the locks on the air.
Racks, power, changes, monitoring and the plan for the worst day.
IPv6, software-defined networks, zero trust and SASE, without the buzzwords.
Locks, keys and fingerprints for data.
How your browser knows a site is real.
Most servers and most security tools live here.
Where most cyber careers start.
What to do in the worst hour of the year.
Finding out a lot from what's already public.