Blogs
Threat Reports
Explore expert tips, security updates, and everyday digital security advice written to keep you informed and prepared
-
Hello world!
Welcome to WordPress. This is your first post. Edit or delete it, then start writing!
Read →
-
70% of open-internet IoT devices in Africa carry a known vulnerability
Most of the exposure is not exotic. It is a handful of management ports left open on hardware nobody has logged into for years.
Read →
-
The credential stuffing playbook used against advocacy groups
It is not a brute force attack. It is a small number of correct guesses, spread thin enough that nothing trips.
Read →
-
Your CMS plugins are someone else’s supply chain
Every plugin is a standing invitation for someone else’s code to run on your server. Most of them have been sitting there for years.
Read →
-
Staying online through a shutdown: a continuity checklist
Nearly everything that helps during a shutdown has to be in place before it starts. This is the list.
Read →
-
Why DDoS still works against independent newsrooms
The attack does not need to last. It needs to land in the six hours a story has to travel.
Read →
-
Silent trackers: when your own site surveils your readers
The most valuable thing on a civil society website is often not the content. It is the list of people reading it.
Read →