Research and briefing notes
Findings, method notes and practical guidance for organizations that must document security decisions.
Latest Research Articles
We regularly publish our security findings, guidance, and analysis to help organizations stay ahead of emerging threats.
Healthcare breaches keep stacking up: McKesson, Veradigm, and the vendor API problem
Roughly 6.4 million people show up in breach data tied to McKesson. Veradigm says a vendor credential opened an API path to patient records. If you touch PHI through third parties, your own questionnaire answers are about to get harder.
Mathew Potter
Security Analyst
September Patch Tuesday broke records. Two zero-days already have teeth.
Microsoft fixed nearly 1,000 CVEs on September 8, including two privilege-escalation flaws exploited in the wild. One sits in Windows Update Stack. The other is an ALPC sandbox escape. Here is how to prioritize without drowning in the bulletin list.
Mathew Potter
Security Analyst
August 26 breach brief: seized hacker tools, SharePoint patches, and phishing-as-a-service
The DOJ took down platforms tied to attacks on the Federal Reserve and other US agencies. Switzerland lost 200 government accounts through SharePoint. Meanwhile Greatness PhaaS is pushing fake RingCentral alerts. Here is what actually matters for your team.
Mathew Potter
Security Analyst
Law firms and the 2026 data theft wave: what changed
Big Law breaches this summer were less about locked servers and more about stolen files and quiet extortion. Here is what that means if you run a firm or advise one.
Mathew Potter
Security Analyst
Cyber insurance renewals in 2026: proof beats promises
Carriers are not asking whether you have MFA anymore. They want enrollment numbers, restore tests, and evidence that matches what you attested on the application.
Mathew Potter
Security Analyst
AI is making phishing boring again (and that is the problem)
IBM's 2026 breach data and daily incident reports point the same direction: convincing language at scale. For law firms, the fix is still basics done honestly.
Mathew Potter
Security Analyst
Stay updated
New briefing notes by email. No marketing list, and you can leave at any time.
We respect your privacy. Unsubscribe at any time.