Updated monthly · October 2026 issue is live
Every month we cut through the noise and pick what matters for defenders, testers, detection engineers, compliance owners and anyone adopting AI. Each pick comes with one thing to do about it.
Choose your lane
Hardening, patching and protecting what you run. What to fix first this month, and how.
OffenseHow attackers are actually getting in, explained so you can test for it with permission.
Detection & MonitoringWhere offense meets defense: would your SIEM have seen it? Detection ideas, log sources and validation.
GRCLaws, frameworks and deadlines in plain English: what changed, who it affects, what to do now.
AIThe AI tools everyone is adopting, and the new ways they break: agents, MCP, copilots and models.
September's Patch Tuesday fixed CVE-2026-69730, a Windows DNS remote-code-execution flaw described by ZDI as a successor to SigRed, plus two exploited privilege-escalation bugs: CVE-2026-81963 (Windows Update Stack) and CVE-2026-85880 (ALPC).
Tracked incidents over the summer were led by healthcare/medtech and public-sector victims. Active names include ShinyHunters, Qilin, Clop and Rhysida, with high-profile hits on Boston Scientific, Manchester Airports Group and the Berlin city government.
Wazuh 5.0 betas add a built-in threat-intel (CTI) section, incident response in the dashboard, AI assistant settings, and switch file-integrity who-data to eBPF by default. Manager daemons and config files were reorganized, and legacy OS support was dropped.
CISA's final CIRCIA rule was slated for September 2026 in the Unified Agenda. When it takes effect, covered critical-infrastructure entities must report covered incidents within 72 hours and ransom payments within 24 hours. Check the Federal Register for publication status and the effective date.
Reports at the end of September described AI coding agents publishing more than 13,000 internal screenshots to public GitHub repositories, exposing billing and treasury data from hundreds of organizations.
Beginner, Intermediate and Advanced paths for each team, built from free, reputable resources and our own guides.
Free · once a month
One email a month with the curated picks for Blue, Red, Purple, Compliance and AI, each with a "do this now" step.