Defence
Vendor-neutral cybersecurity technology guides covering identity, zero trust, software supply chains, detection, resilience, recovery, and security architecture.
ExplainerENISA’s initial CRA Single Reporting Platform gives manufacturers a common route for qualifying actively exploited vulnerabilities and severe incidents; the launch does not make every Cyber Resilience Act obligation live.
NewsProbes have been reported against GitLab CVE-2026-85706, a critical self-managed-instance issue patched on 10 September; affected operators should check scope and fixed releases without presuming compromise.
GuideRecovery planning is credible only when protected copies, clean rebuild paths, and rehearsed restoration decisions work together.
AnalysisTokens and sessions deserve the same disciplined lifecycle controls as passwords because they can carry already-authenticated access.
AnalysisLanguage choice can reduce memory-management weaknesses, yet security benefits depend on boundaries, tooling, training, and careful migration decisions.
GuideA useful remediation queue joins technical exploitability with asset exposure, likely control gained, and the consequence to the organisation.
GuideReducing credential lifetime can shrink a leak’s useful window, but only when issuance, scope, revocation, and workload operations are designed together.
ExplainerProduct teams can reduce preventable harm when the safer path is built into design, delivery, and maintenance rather than delegated to every customer.
GuideDuring an incident, logging and preservation practices can protect the facts responders need before containment, rebuild, or recovery changes the environment.
NewsA cross-industry letter urges stronger defensive tools and better support for hospitals, water systems, and other under-resourced infrastructure.
GuideIdentity verification, device posture, least privilege, segmentation, and high-quality telemetry form the operational core of a zero-trust programme.
ExplainerPasskeys remove reusable passwords from routine sign-in, while account recovery and device migration remain critical parts of the threat model.