Cyber Security, Without the Jargon

Attackers used a genuine Nikkei employee account to send about 9,000 malicious emails. Here is a calm rule for checking an unexpected request when the sender address looks right.

Google paused new product-vulnerability reports to its open-source reward program after automated submissions rose and most proved invalid. The useful response is an evidence gate between an AI finding and another person's queue.

A proposed US copyright law would let courts order large VPN, broadband, and DNS providers to block access to foreign sites. Here is what the bill says, where collateral damage begins, and what privacy-conscious users should watch.

A China-aligned phishing campaign relayed real Microsoft sign-ins while stealing the resulting sessions. The defence starts with origin-bound authentication, independent verification, and a response plan that revokes more than a password.

An automated intruder chained two Zammad flaws and reached root in seconds at DIVD. The useful lesson is how segmentation, logs, and a fast containment decision kept speed from becoming unlimited reach.