Blog
Analysis and guides
Actively exploited vulnerabilities, checklists and executive guides on web security, NIS2 and industrial systems. Factual and sourced.
- Executive guide · NIS2What can a NIS2-regulated partner require from its supplier?Which suppliers are primarily affected, what is mandatory, and what can be added by contract.
- Executive guide · Web securityAutomated scanner or penetration test?What each one finds, what it misses, and which fits your website or online shop.
- Executive guide · BasicsFive questions for your IT administratorWhat an executive can ask without IT knowledge, and what a good answer looks like.
- Threat analysis · Web · PHPPHP2Shell: critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)Unauthenticated remote code execution in every web-facing PHP deployment, exploited before the fix was released. Who is affected, what to do and what to look for in the logs.
- Research note · OT · OPC UAOPC UA security modes in practiceNone, Sign or SignAndEncrypt: what an attacker sees in each mode, and which configuration we recommend.
- Executive guide · NIS2Ten pitfalls of the NIS2 supplier questionnaireWhat NIS2-regulated partners may ask their suppliers, and the typical mistakes to watch for in the answers.
- Monthly threat brief · CISA KEVActively exploited vulnerabilities: October 202636 new entries in the CISA KEV catalog: edge devices, web platforms, industrial relevance, and what to fix first.