Reporting, analysis, and practical guidance for modern cyber defense — for the people who have to make it work.
The Agent Reads First
Eight flaws let a repository's own Git config run code inside seven AI coding agents — before the prompt that asks whether you trust it. Why the tooling underneath the models is the attack surface nobody audited, and what to do about it today.
September 2026
The cover story and both desks — from the current issue.
The Agent Reads First
GitSpawn: a hostile repository nominates a command, and seven AI coding agents run it at startup — outside the sandbox, before the trust prompt.
AI Tech deskEight hours, $535, one ported exploit
Forescout used Claude to port a PLC exploit between WAGO controllers — and concluded a human might have been faster. The month's most useful negative result.
Digital Guard deskThe defenders' own week of trouble
SonicWall zero-days chained in the wild, Defender flagging Google links, 22,000 Exchange servers still open, and admin tooling used as the payload.
From the desk
Evergreen guidance, kept current — the pieces readers come back to.
How to Read a Breach Notification
Six questions that pull the disclosure out of the legal language — and why the first number is almost never the last.
Practice · ResilienceThe Restore You Have Never Tested
Backups are bought; restores are earned. Four properties a backup needs, and four rehearsals worth scheduling this quarter.
Cover Story · August 2026The Exploitation Window Collapses
Disclosure-to-exploitation is now measured in days. Patching cadence, exposure management and forensic readiness all have to move.
Threat LandscapeInside the 2026 Threat Landscape
Ransomware's diversifying playbook, identity attacks moving upstream, and AI-scaled phishing — what to prioritize this quarter.
ArchitectureZero Trust in Practice
Identity-first access in layers — without a big-bang migration and without slowing the business down.
India · MSME SecurityThe First Five Things an Indian MSME Should Do
No security team, no budget, and statutory duties anyway. Five measures, in order, that cost almost nothing.
The Sentry Briefing
One email a week: the stories that matter, what they mean for defenders, and one practical thing to do about them. No noise, unsubscribe anytime.