Three ways in. Threat Briefs for what changed and what to do about it now; Deep Dives for the frameworks and architecture that outlast the news cycle; Talks for the slides and sources from every conference talk.
Get new briefings by email or Follow via RSS — new Threat Briefs and Deep Dives in any feed reader (Feedly, Inoreader, NetNewsWire, Outlook).
Indicators · Response · Advice
Every threat brief lives here: today’s edition and the full archive. What changed, who it affects, how to spot it, and what to do about it.
Current (Morning): A Palo Alto VPN Bypass Patched in May Is Under Confirmed Attack, With Ransomware Use Reported, Plus a WordPress Plugin Exploited Before Its Flaw Had a Record and a CVSS 10 GitLab Flaw, With Hunts You Can Run Today
Frameworks · Architecture · Strategy
The thinking that outlasts the news cycle: incident-response frameworks, identity and SaaS security, secure development, and AI adoption — written for leaders and the teams who carry it out.
Inside: PIVCCERL™ lifecycle · SaaS token security · Threat-Informed Development · Agentic AI access
Slides · Sources · Frameworks
Every talk’s slides and every source cited on stage, so you can take the frameworks back to your team.
Latest: The Insider Risk You Buy Monthly · Polk County Security Summit 2026