The Advisory
Outages, scams, patches and hot takes. Ideally before a user forwards it to you.
-
Exploited this week: 6 vulnerabilities added to CISA’s KEV list (28 Sep to 4 Oct 2026)
None of the 6 are Microsoft. The first federal deadline is 2 October 2026.
-
The QR code is just a link you cannot read
A QR code is a web address drawn as a square. You cannot read it, so you cannot judge it, and that is exactly why attackers…
Read the full story: The QR code is just a link you cannot read
-
Support ending soon: October 2026 end-of-life roundup
11 releases lose support in the next 90 days, from Microsoft Office 2021.
Read the full story: Support ending soon: October 2026 end-of-life roundup
-
Exploited this week: 12 vulnerabilities added to CISA’s KEV list (21 Sep to 27 Sep 2026)
1 of the 12 is Microsoft. The first federal deadline is 24 September 2026.
-
Two weeks on Omarchy with Claude. I set it up wrong, and that was the lesson.
I started using Omarchy Linux alongside Windows, and working side by side with Claude. Most of what went wrong in the first two weeks was not…
Read the full story: Two weeks on Omarchy with Claude. I set it up wrong, and that was the lesson.
-
You said no to the prompt. They got in anyway.
MFA stops most account takeovers, and attackers have noticed. This month researchers opened up a phishing service that walked past MFA at 258 organizations, and the…
Read the full story: You said no to the prompt. They got in anyway.
-
Using AI at work: what to do, and what never to do
Claude, ChatGPT, Gemini and Grok are the same kind of tool with different badges. How to get good answers out of them, how to check what…
Read the full story: Using AI at work: what to do, and what never to do
-
Your team is already using AI. Here is the security work that comes with it.
Not a warning to stay away. AI changes what leaves your organisation, what counts as untrusted input, and how many privileged identities you are running. Six…
Read the full story: Your team is already using AI. Here is the security work that comes with it.
-
Wrong person, right target: the Discord DM that ends in an .exe
A stranger DMs the wrong account, decides you are their first American friend, and within twenty messages wants you to install a game, an “emulator” and…
Read the full story: Wrong person, right target: the Discord DM that ends in an .exe
-
Your phone just asked you to approve a sign-in. Say no.
An “Approve sign-in?” prompt you did not ask for is not a glitch. It means someone already has your password and is standing at the second…
Read the full story: Your phone just asked you to approve a sign-in. Say no.
-
Windows 10 has 26 days left. Again.
Windows 10 “ended” last October. Then Microsoft sold everyone a one-year stay of execution. That runs out on October 13, 2026, and this time there is…
-
Microsoft 365 locked its front door: the September 16 sign-in outage (MO1472904)
Microsoft 365 sign-ins failed with 502 and 503 errors across the US and UK on September 16. It is resolved, but Microsoft found no fault inside…
Looking for something older? Every article, by year.