Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The EU Cyber Resilience Act's 24-hour reporting deadline is already in force. Is your organisation prepared? Since 11 September 2026, manufacturers of covered software, IoT devices and connected products must report certain cybersecurity vulnerabilities and incidents within strict deadlines. Under the EU Cyber Resilience Act (CRA), manufacturers must submit: **Within 24 hours:** An early warning after becoming aware of an actively exploited vulnerability or severe incident affecting product security.

What happens when you connect Claude, ChatGPT, or Gemini directly to physical security infrastructure using the Model Context Protocol (MCP)? Traditional portals only answer what they were built to answer - leaving operations and support teams stuck pulling data across a dozen screens. With the launch of Brivo Reseller MCP (the first MCP server for security systems integrators), your AI assistant connects directly to your Brivo partner portal data right alongside your CRM, billing, email, and ticketing tools.

Weak or reused passwords can give cybercriminals access to your accounts, often at your expense. As a proud Cybersecurity Awareness Month Champion with the National Cybersecurity Alliance, we're reminding everyone that stronger passwords and smarter security habits make a difference. Don't make it easy for attackers.

This week on the podcast, we dive into a pair of PHP vulnerabilities dubbed PHP2Shell and the chaos they caused through uncoordinated disclosure. After that, we discuss a certificate authority who's random number generator only goes to three digits before ending with law enforcement action around ShinyHunters ransomware negotiators.

Most cyber incidents trace back to people, so a vendor’s employee engagement can say a lot about its security. Brian Mackerer of Craft.co explains why procurement teams are starting to look at cyber risk alongside other signals, like employee engagement and financial stability, instead of relying on a cyber score alone. Discover more at upguard.com.

PHP2Shell is here. See how Tanium finds PHP across your environment, scopes your exposure, and maps attack paths so you know what to patch first. In this special edition, we walk through how Tanium gives you visibility into the new PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and the resources available to help you respond.

This week’s briefing covers: Dive deeper.