ExplainerPHP Security Update: Fixed Versions and Checks for India Websites
Check the released PHP security fixes, vendor backports and the actual web runtime before assuming your India-hosted website is patched.
Defence
Cybersecurity Technology Guides
Vendor-neutral cybersecurity technology guides covering identity, zero trust, software supply chains, detection, resilience, recovery, and security architecture.
15Stories in this field
Explainer
NewsIonQ–Elisity Deal: What Changes for Quantum-Safe Security?
IonQ plans to acquire Elisity, pairing identity-based access controls with PQC and QKD plans. Here is what the deal changes—and what remains unproven.
AnalysisRogue AI agents and cybersecurity: what the documented cases actually show
The strongest documented cases point to containment, permissions and untrusted input—not evidence that AI agents independently develop hostile goals.
ExplainerENISA Launches EU Cyber Resilience Act Reporting Platform as Manufacturer Duties Begin
ENISA’s initial CRA Single Reporting Platform gives manufacturers a common route for qualifying actively exploited vulnerabilities and severe incidents; the launch does not make every Cyber Resilience Act obligation live.
NewsGitLab File-Read Flaw Draws Probes as CISA Adds It to Exploited-Vulnerability List
Probes have been reported against GitLab CVE-2026-85706, a critical self-managed-instance issue patched on 10 September; affected operators should check scope and fixed releases without presuming compromise.
GuideRansomware recovery depends on immutable backups and tested restores
Recovery planning is credible only when protected copies, clean rebuild paths, and rehearsed restoration decisions work together.
AnalysisCloud identity attacks increasingly target tokens and active sessions
Tokens and sessions deserve the same disciplined lifecycle controls as passwords because they can carry already-authenticated access.
AnalysisMemory-safe languages can remove entire bug classes—but migration still needs evidence
Language choice can reduce memory-management weaknesses, yet security benefits depend on boundaries, tooling, training, and careful migration decisions.
GuideVulnerability prioritisation should start with exploitability, exposure, and business impact
A useful remediation queue joins technical exploitability with asset exposure, likely control gained, and the consequence to the organisation.
GuideShort-lived credentials reduce the damage from leaked secrets
Reducing credential lifetime can shrink a leak’s useful window, but only when issuance, scope, revocation, and workload operations are designed together.
ExplainerSecure-by-design defaults move risk decisions away from end users
Product teams can reduce preventable harm when the safer path is built into design, delivery, and maintenance rather than delegated to every customer.
GuideIncident-response logs must preserve evidence before systems are changed
During an incident, logging and preservation practices can protect the facts responders need before containment, rebuild, or recovery changes the environment.
News116 Organisations Call for a Coordinated AI Cyber-Defence Push
A cross-industry letter urges stronger defensive tools and better support for hospitals, water systems, and other under-resourced infrastructure.
GuideZero Trust Without the Slogan: Five Controls That Change Outcomes
Identity verification, device posture, least privilege, segmentation, and high-quality telemetry form the operational core of a zero-trust programme.
ExplainerPasskeys Reduce Phishing Risk—But Recovery Still Defines Security
Passkeys remove reusable passwords from routine sign-in, while account recovery and device migration remain critical parts of the threat model.