What's new
Mean Time to Patch (MTTP): Why the Numbers Keep Getting Worse
Mean time to patch explained: what MTTP measures, why the median has risen to 43 days, and how to... Read More
Mindfulness and Phishing Detection: Why Attention Beats Knowledge
Mindfulness predicts phishing detection better than knowledge. See why relaxed people click more, why warnings decay after two exposures,... Read More
Information Barriers in Financial Services: The Control That Runs on People
Information barriers fail at the wall crossing, not the firewall. See what the SEC expects, how crossings work, and... Read More
Password Length Requirements: What NIST Says and What Quantum Changes
NIST requires 15 characters, not 25. See what SP 800-63B-4 actually says, why Grover's algorithm changes less than claimed,... Read More
EU AI Act AI Literacy: What Article 4 Requires After the...
Article 4 of the EU AI Act requires providers and deployers of AI systems to take measures supporting AI... Read More
UK Cyber Security and Resilience Bill: What Changes and When
The Cyber Security and Resilience Bill overhauls the UK’s NIS Regulations 2018, pulling managed service providers, data centres, and... Read More