Zero-day vulnerability in internal tools: What the Metabase incident has triggered
A critical zero-day in Metabase hit Framework and Tally. What an exposed internal tool means for GDPR obligations and audit evidence.
Analyses, practical tips and assessments from the world of IT security.
209 articles total
The AI-discovered HTTP/2 Bomb takes down Apache, nginx, Envoy and IIS in seconds. What CVE-2026-49975 is and how operators should respond now.
Understand how a race condition in xfce4-screensaver up to 4.20.2 lets keystrokes bypass the lock screen during a monitor switch, and how to fix it.
ISO 27001, BSI IT-Grundschutz, and TISAX: A Direct Comparison - Which Framework Is Right for Your Business?
Compare IT security certifications T.I.S.P., CISSP, CISM, CompTIA Security+, and ISO 27001 to choose by cost, prerequisites, and career impact.
Analysis of Real Phishing Attacks - From GitLab’s Internal Simulation to Energy Bill Scams. What Companies Can Learn From Them.
Fake WhatsApp Chats, Messenger Phishing, and Social Engineering: How Attackers Abuse WhatsApp, How to Spot Scams, and How to Protect Your Business.
Arturs Nikitins
Initial consultation & needs analysis
Looking for personal advice?
No obligation · Reply within 24h on business days