Topic tag

incident response

9 articles tagged incident response. Browse the full archive or jump to all posts.

August 30, 2026 · 12 min read

PaperCut NG/MF: print server fire drill before Monday

PaperCut shipped a second emergency patch in 48 hours on 28 August because researchers bypassed the first. ANZ schools, libraries and MSP print rooms are at risk if v25 or v26 is not in place.

August 15, 2026 · 6 min read

Metabase zero-day week two: SMBs got hit first

CVE-2026-72898 has been in the wild for over a week. N8n and Kilo Code are the latest victims, and the pattern is squarely aimed at self-hosted SMB Metabase.

August 13, 2026 · 17 min read

LiteLLM supply-chain leak: how I checked my own home gateway before the news cycle caught up

A 40-minute poisoned-publish window on PyPI in March turned LiteLLM into the largest AI supply-chain leak of 2026. 195 TB of credentials, 2,500+ orgs, 434,000 CI/CD pipelines. I run LiteLLM at home. Here is the audit I ran this morning, what the Postgres logs actually showed, and the call I made on whether to rotate six provider keys.

August 8, 2026 · 8 min read

Metabase SQLi zero-day: check your instance this week

Metabase disclosed a critical, actively exploited SQL injection zero-day on 7 August. Patch your self-hosted instance and check for compromise this week.

August 2, 2026 · 7 min read

Three claimed CISA KEV additions: the IT-pro verification and triage checklist

A practical workflow for ANZ IT teams to verify new CISA KEV entries, map them to their stack, and plan remediation without trusting unverified vulnerability details.

August 2, 2026 · 9 min read

MFA Fatigue: Your 60-Minute IT-Pro Playbook

Detect MFA prompt bombing, harden Microsoft 365 and your IdP, and contain a suspected token theft in the first 60 minutes.

July 23, 2026 · 7 min read

Origin Energy's 48-Hour Walk-Back

Wednesday: "we do not believe bank details were taken." Thursday: incomplete card data confirmed. The lesson isn't the breach. It's the way the headline moved in two days.

March 8, 2026 · 8 min read

The Incident Response Plan You Don't Have (But Need)

Every business needs an incident response plan. Here's a practical incident response plan template designed for SMBs—not enterprise SOC teams.

March 5, 2026 · 7 min read

Ransomware Doesn't Care About Your Compliance Certificates

Your ISO 27001 certificate won't stop ransomware. Learn what actually works in ransomware protection strategy—beyond checkbox compliance.