What's changing in CMMC and NIST 800-171, and the vulnerabilities worth knowing about — written for people running a business, not a SOC. Subscribe via RSS.
Two critical vulnerabilities in the PHP runtime itself — not in any specific application — mean a perfectly secure WordPress or custom site can still be exposed. Here's what to check right now.
Microsoft's October 13 release was one of the largest Patch Tuesdays of the year. The .NET Framework update (KB5127684 and its counterparts) is worth moving to the top of the queue.
The Department of War paused the CMMC Phase 2 rollout in July 2026 for a program review. Here's exactly what's on hold, what hasn't changed, and what contractors should still be doing right now.
