The New Trusted User: AI Agent Security in Practice

AI agent security: an employee badge with a glowing blue chip instead of a photo

AI agents are no longer just chat windows. They read documents, query databases, create tickets, send emails, write code and connect to business systems. That makes them useful. It also means AI agent security is partly an identity question, because an agent looks a lot like another user in your environment. Not a human user,…

Read More

PHP2Shell Vulnerability: The Flaw Is in PHP Itself

PHP2Shell vulnerability: a stack of three black stone blocks, the bottom one cracked with a thin line of blue light

We have covered PHP2Shell twice already: in our post of 21 October and in our Top 5 of 23 October. A week after PHP shipped its emergency patches, this is a closer look at the PHP2Shell vulnerability: what the flaw is, what turned out to matter, and what is still worth checking this week. Two…

Read More

DACH Threat Landscape 2026: What SMEs Must Know

DACH region 2026 cyber threat landscape overview for German, Austrian and Swiss companies

A ransomware incident can halt a production line, disrupt a logistics network or leave a clinic scrambling to access essential systems. Across Germany, Austria and Switzerland, those risks are no longer hypothetical. ENISA’s 2025 Threat Landscape report names ransomware as the most disruptive and economically damaging activity in the EU, while hacktivist activity, most of…

Read More

Cybersecurity Awareness Trends 2026

Key cybersecurity awareness trends shaping security culture in 2026

Cybersecurity Awareness Month is observed in October in the United States and marks a period of heightened awareness activity across Europe, which makes now a good moment to take stock of how security awareness is changing. The discipline keeps evolving quickly — what the biggest human risks are, what gets in the way of good…

Read More

Device Code Phishing: What SMEs Need to Know

Device code phishing abuses real Microsoft logins and working MFA, leaving few warning signs. Here's what SMEs need to know in 2026.

Cybercriminals have started exploiting a login shortcut millions of people already trust. Rather than sending victims to a fake login page or trying to steal a password outright, they persuade employees to authorise an attacker-controlled device through a completely legitimate identity provider — Microsoft, most often. The result is a fast-growing form of social engineering…

Read More