Insights & notes
Security knowledge without the padding. We write about what actually works — in the field, with real clients.
The new Czech Cybersecurity Act (No. 264/2025 Coll.) introduces obligations that this time go far beyond large corporations and public institutions. The regulation affects thousands of Czech companies — and many still don't know it.
Read article →The week of 12 to 16 October 2026 brought five exploited vulnerabilities affecting the Ivanti VPN gateway, Palo Alto firewalls, the Cisco email gateway, Windows and the AhsayCBS backup server.
Read article →Over 2,500 organisations and 434,000 CI/CD pipelines. Cisco, Siemens, Volkswagen, Airbus and Deloitte on the list. Not one of them was attacked directly, and neither was the library through which it reached them. Attackers obtained a token belonging to the Trivy security scanner and rode it into the LiteLLM build. One un-revoked token, three tools deep. What that means for your dependencies.
Read article →A dense week. August Patch Tuesday brought over 400 fixes, CISA added four entries to its actively exploited catalog, and one researcher published a working Windows Defender exploit for which no patch exists. Metabase, rated 10.0, already has confirmed victims, and the N-able N-central attack reaches customers through their IT provider. Five things and what to do about them.
Read article →We need a pentest. We hear this often, and about half the time it is the wrong answer. Three distinct services are sold under similar names, and the price range is wide enough that cost tells you nothing: a quote for EUR 1,200 and one for EUR 16,000 can carry the same label. What a scan answers, what a pentest answers, what an assessment covers, and when a pentest is wasted money.
Read article →The first week of August followed an unusually clear pattern. Not one of the major vulnerabilities targeted endpoints or users. All of them targeted the tools that manage infrastructure: the TeamCity build server, the N-able N-central platform, the Cisco firewall console. Why hunt workstations one at a time when you can compromise the system that manages all of them. Five things worth attention.
Read article →Nobody calls us saying they need a vCISO. They call because a customer sent a security questionnaire nobody can answer. Because they have discovered they fall under new regulation. Because the colleague who somehow held it together has left. The common denominator is always the same: nobody owns security. What a vCISO actually does, how much time it takes, what it costs, and when you need something else.
Read article →AI tools are already in your organisation — whether IT knows about it or not. Employees are working with ChatGPT, Gemini, and Copilot, feeding them internal documents, customer emails, source code, and business plans. Data that previously stayed inside the corporate network now travels to cloud-based models operated by external providers.
Read article →In 2023, Copilot for Microsoft 365 was a near-future promise. In 2024, it became available to enterprise customers. In 2025, Microsoft announced the EU Data Boundary as a solved problem, and Copilot began reaching regulated environments — with assurances that customer data would stay in Europe. In 2026, two developments complicated that picture.
Read article →EU Cyber Resilience Act: Secure Software Development Is No Longer Optional. The regulation entered into force on 10 December 2024. It is built on a straightforward premise: manufacturers bear responsibility for the security of their products throughout their supported lifetime, not only at the point of sale. And they cannot transfer that responsibility to customers through license agreement exclusions (EULAs).
Read article →Three Critical June 2026 Vulnerabilities Under Active Exploitation: Check Point VPN (CVE-2026-50751) patched June 8, 2026 · Cisco SD-WAN (CVE-2026-20182) patched · RoguePlanet (CVE-2026-50656) unpatched
Read article →The most common mistake in cybersecurity? A company builds a system, launches an application, or introduces a new process — and only then starts asking how to secure it. By that point, it's usually too late for security to be truly effective. And too expensive to be done properly.
Read article →Picture this: someone walks into your office, plugs a USB stick into an employee's laptop, and five minutes later walks out with access to everything on that encrypted drive. Or imagine an employee with no admin rights running a simple script on a company computer and gaining full control of the operating system — no alert from the antivirus, no log entry, nothing to suggest anything happened at all.
Read article →Just a few years ago, a fraudulent email was obvious at first glance: typos, awkward phrasing, a suspicious sender, and an unrealistic promise. Today, it was written by a model trained on billions of texts. It knows your name, references your latest project, and knows what your boss is called. How do you defend against a threat the human eye can no longer see?
Read article →Large enterprises have CISOs, dedicated security teams, and million-euro budgets. Small and medium-sized businesses have reality — limited resources, little time, and a steadily growing number of cyberattacks aimed squarely at them. The good news: 80% of threats can be eliminated with the right basic measures in place. Here are the ten that matter most.
Read article →