Topic tag

incident response

8 articles tagged incident response. Browse the full archive or jump to all posts.

August 15, 2026 · 6 min read

Metabase zero-day week two: SMBs got hit first

CVE-2026-72898 has been in the wild for over a week. N8n and Kilo Code are the latest victims, and the pattern is squarely aimed at self-hosted SMB Metabase.

August 13, 2026 · 17 min read

LiteLLM supply-chain leak: how I checked my own home gateway before the news cycle caught up

A 40-minute poisoned-publish window on PyPI in March turned LiteLLM into the largest AI supply-chain leak of 2026. 195 TB of credentials, 2,500+ orgs, 434,000 CI/CD pipelines. I run LiteLLM at home. Here is the audit I ran this morning, what the Postgres logs actually showed, and the call I made on whether to rotate six provider keys.

August 8, 2026 · 8 min read

Metabase SQLi zero-day: check your instance this week

Metabase disclosed a critical, actively exploited SQL injection zero-day on 7 August. Patch your self-hosted instance and check for compromise this week.

August 2, 2026 · 7 min read

Three claimed CISA KEV additions: the IT-pro verification and triage checklist

A practical workflow for ANZ IT teams to verify new CISA KEV entries, map them to their stack, and plan remediation without trusting unverified vulnerability details.

August 2, 2026 · 9 min read

MFA Fatigue: Your 60-Minute IT-Pro Playbook

Detect MFA prompt bombing, harden Microsoft 365 and your IdP, and contain a suspected token theft in the first 60 minutes.

July 23, 2026 · 7 min read

Origin Energy's 48-Hour Walk-Back

Wednesday: "we do not believe bank details were taken." Thursday: incomplete card data confirmed. The lesson isn't the breach. It's the way the headline moved in two days.

March 8, 2026 · 8 min read

The Incident Response Plan You Don't Have (But Need)

Every business needs an incident response plan. Here's a practical incident response plan template designed for SMBs—not enterprise SOC teams.

March 5, 2026 · 7 min read

Ransomware Doesn't Care About Your Compliance Certificates

Your ISO 27001 certificate won't stop ransomware. Learn what actually works in ransomware protection strategy—beyond checkbox compliance.