https://cyphrq.com/AI trends, tools, security and privacy for the quantum age. Plain answers for everyone, technical depth for the people who defend systems.https://cyphrq.com/posts/ai-browsers-explained/https://cyphrq.com/posts/ai-browsers-explained/AI browsers explained: sidebar assistants vs agent modes that click and fill forms, what they can see, and the privacy settings worth checking.Tue, 27 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/read-a-cve-record-nvd-and-cve-program-2025/https://cyphrq.com/posts/read-a-cve-record-nvd-and-cve-program-2025/Read a CVE record and an NVD entry field by field, with a real example, and learn what the 2025 CVE funding scare and NVD backlog mean for defenders.Tue, 27 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-agents-escape-test-environments-2026/https://cyphrq.com/posts/ai-agents-escape-test-environments-2026/In July 2026 OpenAI's test agents reached Hugging Face's systems. What each company reported, what was affected, and the sandbox controls to check.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-finds-vulnerabilities-darpa-aixcc/https://cyphrq.com/posts/ai-finds-vulnerabilities-darpa-aixcc/DARPA's AI Cyber Challenge final: AI systems found 54 of 63 planted bugs, patched 43, and found 18 real ones. What it shows and what it doesn't.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-for-science-research/https://cyphrq.com/posts/ai-for-science-research/AI predicted protein structures, proposed new crystals and found faster algorithms. What the papers show, what they don't, and what to watch next.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-meeting-notetaker-privacy/https://cyphrq.com/posts/ai-meeting-notetaker-privacy/Who is told when Zoom, Teams, Google Meet or a bot takes notes, where transcripts are stored and for how long, and what hosts and attendees can do.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/breach-notification-deadlines-worldwide/https://cyphrq.com/posts/breach-notification-deadlines-worldwide/Who must be told about a data breach, and by when: GDPR, UK, Australia, Brazil, Canada, the SEC and NIS2 side by side, each linked to its source.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/chinese-ai-companies-data-security/https://cyphrq.com/posts/chinese-ai-companies-data-security/China's AI rules, PIPL and Data Security Law, what DeepSeek, Kimi and Alibaba Cloud say about data location, and the questions to ask first.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ci-cd-for-ai-applications/https://cyphrq.com/posts/ci-cd-for-ai-applications/How to ship LLM features safely: version prompts and model IDs, gate releases on evals and red-team tests, secure the model supply chain, and roll back.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/data-breach-lifecycle/https://cyphrq.com/posts/data-breach-lifecycle/How a data breach unfolds, from initial access and dwell time to containment and notification, with 2026 figures from IBM, Mandiant and Verizon.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/deepseek-database-exposure-2025/https://cyphrq.com/posts/deepseek-database-exposure-2025/In January 2025 Wiz found an open DeepSeek database with over 1 million log entries. What was exposed, what regulators did, and what IT teams should check.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/eu-ai-act-timeline-what-applies-when/https://cyphrq.com/posts/eu-ai-act-timeline-what-applies-when/The EU AI Act timeline from 2025 to 2028, including the 2026 AI Omnibus changes, and the practical steps an organisation should have in place today.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/fusion-energy-progress/https://cyphrq.com/posts/fusion-energy-progress/NIF has reached fusion ignition many times since 2022. Here is what that proves, what it doesn't prove about power plants, and what ITER's dates say.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/gcc-cloud-regions-data-residency/https://cyphrq.com/posts/gcc-cloud-regions-data-residency/Which cloud providers list regions in the UAE, Saudi Arabia, Qatar and Bahrain as of 25 Oct 2026, and what local rules mean for where your data sits.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/gcc-crypto-regulation-uae-vara-saudi/https://cyphrq.com/posts/gcc-crypto-regulation-uae-vara-saudi/Who regulates crypto in the UAE and Saudi Arabia, what VARA's technology rulebook demands of firms, and which GCC rules I could not confirm.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/india-crypto-tax-pmla-rules/https://cyphrq.com/posts/india-crypto-tax-pmla-rules/India's crypto rules for exchanges and users: PMLA coverage since March 2023, FIU-IND registration, the RBI's position, tax and safe-use checks.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/infostealers-session-token-theft/https://cyphrq.com/posts/infostealers-session-token-theft/Infostealer malware can copy a logged-in session and skip MFA. How session cookie theft works, and the controls that make a stolen token useless.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/insider-threat-program/https://cyphrq.com/posts/insider-threat-program/How to build an insider threat program: CISA's insider types, warning signs, least privilege, logging and DLP, HR and legal roles, and lawful monitoring.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-22301-business-continuity-explained/https://cyphrq.com/posts/iso-22301-business-continuity-explained/ISO 22301 explained: what the business continuity standard covers, how a BIA and recovery objectives work, and how certification goes.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-27701-privacy-management-explained/https://cyphrq.com/posts/iso-iec-27701-privacy-management-explained/ISO/IEC 27701 explained: the privacy management standard for controllers and processors, how it relates to GDPR, and what the 2025 edition changed.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-42001-ai-management-system-explained/https://cyphrq.com/posts/iso-iec-42001-ai-management-system-explained/ISO/IEC 42001 is the AI management system standard. What it covers, who should consider it, how audit and certification work, and how it differs from NIST.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/laser-directed-energy-defense-research/https://cyphrq.com/posts/laser-directed-energy-defense-research/DragonFire and US directed-energy programmes from official sources: the £10-a-shot claim, GAO's $1bn-a-year figure, and weather and range limits.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/mckinsey-lilli-red-team-2026/https://cyphrq.com/posts/mckinsey-lilli-red-team-2026/In 2026 CodeWall's AI agent tested McKinsey's Lilli chatbot under its disclosure policy. What it reported, what McKinsey said, and what to check.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/mcp-security-explained/https://cyphrq.com/posts/mcp-security-explained/What the Model Context Protocol is, how MCP servers and tools get abused, real CVEs, and the fixes: allowlists, pinned versions, narrow scopes, approval.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/medibank-2022-breach-oaic-action/https://cyphrq.com/posts/medibank-2022-breach-oaic-action/How the 2022 Medibank data breach happened, who was affected, what the OAIC alleges in its Federal Court case, and what security teams should check.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/meta-1-2bn-gdpr-fine-data-transfers/https://cyphrq.com/posts/meta-1-2bn-gdpr-fine-data-transfers/Meta's 2023 €1.2bn GDPR fine: what Ireland's DPC decided, why the EDPB stepped in, and what it means for EU-US data transfers.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/nis2-directive-scope-requirements-reporting/https://cyphrq.com/posts/nis2-directive-scope-requirements-reporting/Who NIS2 covers, the ten Article 21 security measures, the 24-hour, 72-hour and one-month incident reporting clock, fines, and a readiness checklist.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/openai-security-data-protection-approach/https://cyphrq.com/posts/openai-security-data-protection-approach/How OpenAI secures frontier models and business data: Preparedness Framework, SOC 2 and ISO scope, retention, ZDR, and what isn't verified.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/optus-2022-data-breach-oaic-acma/https://cyphrq.com/posts/optus-2022-data-breach-oaic-acma/What Optus said about its 2022 cyberattack, what the OAIC and ACMA allege in Federal Court, the penalty limits, and what security teams should check.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/perovskite-solar-and-energy-storage-research/https://cyphrq.com/posts/perovskite-solar-and-energy-storage-research/Perovskite cells pass 26% in the lab and a perovskite-silicon tandem reached 34.85%. Durability is the open question. What the records mean.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/php2shell-php-rce-cve-2026-109618/https://cyphrq.com/posts/php2shell-php-rce-cve-2026-109618/Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, allow remote code execution. Fixed in 8.5.12, 8.4.27, 8.3.36, 8.2.35. What to do now.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/post-quantum-tls-hybrid-key-exchange/https://cyphrq.com/posts/post-quantum-tls-hybrid-key-exchange/Hybrid X25519MLKEM768 key exchange is on by default in major browsers and libraries. See where it runs, where it's missing, and how to test your servers.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ransomware-decryption-tools/https://cyphrq.com/posts/ransomware-decryption-tools/Free ransomware decryptors exist for some families only. What No More Ransom offers, why paying guarantees nothing, and the backups that matter more.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ransomware-how-attacks-unfold-and-controls/https://cyphrq.com/posts/ransomware-how-attacks-unfold-and-controls/How ransomware attacks unfold, from first access to encryption and extortion, and the backup, identity and patching controls that break the chain.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/siem-vs-soc/https://cyphrq.com/posts/siem-vs-soc/A SIEM is a log platform; a SOC is the team that acts on it. Build, buy or hybrid, which logs to collect first, how long to keep them, and staffing.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/soc-2-vs-iso-27001/https://cyphrq.com/posts/soc-2-vs-iso-27001/SOC 2 is an auditor's report on controls; ISO/IEC 27001 is a certified management system. How audits and proof differ, and how to pick the right one.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/soc-requirements-us-regulations/https://cyphrq.com/posts/soc-requirements-us-regulations/What NYDFS, the SEC, PCI DSS, HIPAA and CIRCIA require for monitoring, logging and incident response, and when that means a SOC or MDR.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/solid-state-batteries-electric-cars/https://cyphrq.com/posts/solid-state-batteries-electric-cars/Solid-state batteries promise more range and safety for electric cars. What labs and companies have shown so far, what they haven't, and what to watch.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/third-party-risk-management/https://cyphrq.com/posts/third-party-risk-management/Third-party risk management in practice: tier vendors, run due diligence, write audit, breach-notice and exit clauses, monitor, and offboard cleanly.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/us-stablecoin-genius-act-crypto-rules/https://cyphrq.com/posts/us-stablecoin-genius-act-crypto-rules/The GENIUS Act is US stablecoin law: who can issue, 1:1 reserves, AML and OFAC duties, key dates, and which crypto market bills are still pending.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/venturerock-2023-breach/https://cyphrq.com/posts/venturerock-2023-breach/How a hijacked Microsoft 365 mailbox led ADGM's data regulator to reprimand VentureRock in 2023, why there was no fine, and what to check in your estate.Mon, 26 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/302-ai-storage-exposure-2026/https://cyphrq.com/posts/302-ai-storage-exposure-2026/Cybernews says AI aggregator 302.ai left 17.6 million files, including chat logs, in a public Azure bucket. What is confirmed and what to check.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-agent-security-architecture/https://cyphrq.com/posts/ai-agent-security-architecture/A layer-by-layer map of an AI agent's attack surface, from prompt to credentials, with the controls, OWASP and ATLAS IDs and logs each layer needs.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-coding-assistants-security/https://cyphrq.com/posts/ai-coding-assistants-security/What Claude Code, Continue, Cursor and GitHub Copilot send out, the admin controls that limit them, and the repo rules that still need a human.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-routers-model-gateways-explained/https://cyphrq.com/posts/ai-routers-model-gateways-explained/An AI model router puts one API in front of many models. What Bedrock, Azure, Vertex AI, OpenRouter and LiteLLM see, keep, and where your data goes.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/anthropic-security-data-protection-approach/https://cyphrq.com/posts/anthropic-security-data-protection-approach/Anthropic security from its own pages: ASL-3 weight protection, ISO and SOC 2 claims, data retention, zero data retention, and what's unverified.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/bybit-2025-hack-1-5bn/https://cyphrq.com/posts/bybit-2025-hack-1-5bn/How the 2025 Bybit hack happened: a compromised Safe{Wallet} developer machine, tampered web code, the FBI's North Korea attribution, and what to check.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/change-healthcare-2024-ransomware/https://cyphrq.com/posts/change-healthcare-2024-ransomware/The 2024 Change Healthcare ransomware attack: what happened, people affected, UnitedHealth's disclosed costs, and what is known of HHS OCR's response.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/cve-cvss-epss-kev-prioritise-vulnerabilities/https://cyphrq.com/posts/cve-cvss-epss-kev-prioritise-vulnerabilities/CVE, CVSS, EPSS and KEV explained in plain language, with a Log4Shell worked example and a simple order for deciding which patches come first.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/equifax-2017-breach-and-settlement/https://cyphrq.com/posts/equifax-2017-breach-and-settlement/The 2017 Equifax breach exposed data on about 147 million people. How attackers got in, what the 2019 settlement cost, and what to check in your estate.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/gcc-ai-investment-stargate-uae-humain/https://cyphrq.com/posts/gcc-ai-investment-stargate-uae-humain/What the UAE's Stargate UAE campus and Saudi Arabia's HUMAIN announced, what is still a plan, and what it means for the Gulf's tech economy.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/india-dpdp-act-rules-2025/https://cyphrq.com/posts/india-dpdp-act-rules-2025/What India's DPDP Act 2023 and DPDP Rules 2025 require: the 12- and 18-month timeline, 72-hour breach reports, 90-day rights, ₹250 crore cap.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/it-general-controls-explained/https://cyphrq.com/posts/it-general-controls-explained/What IT general controls (ITGCs) are, the four areas auditors test, and the evidence they ask for, with a real audit finding and a prep checklist.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/nist-csf-2-explained/https://cyphrq.com/posts/nist-csf-2-explained/What NIST CSF 2.0 is, its six functions including the new Govern function, how Profiles and Tiers work, and why you cannot be certified.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/openai-disclosed-security-incidents/https://cyphrq.com/posts/openai-disclosed-security-incidents/What OpenAI says happened in the March 2023 ChatGPT bug and the 2025 Mixpanel incident, what data was exposed, and what to ask your AI vendors.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/saudi-pdpl-what-organisations-must-do/https://cyphrq.com/posts/saudi-pdpl-what-organisations-must-do/What Saudi Arabia's Personal Data Protection Law requires: scope, consent, 72-hour breach reports, transfers, registration, fines, and a checklist.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/shamoon-saudi-aramco-2012/https://cyphrq.com/posts/shamoon-saudi-aramco-2012/What the Shamoon wiper did to Saudi Aramco in 2012, how destructive malware works, what Aramco says it learned, and the controls to check.Sun, 25 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-agents-at-work-risks-and-guardrails/https://cyphrq.com/posts/ai-agents-at-work-risks-and-guardrails/What an AI agent is, why letting AI act brings new security risks, and the guardrails, vendor questions and 10-point checklist a manager needs.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-at-work-privacy-checklist/https://cyphrq.com/posts/ai-at-work-privacy-checklist/Is it safe to use ChatGPT at work? Yes, with the right account and settings. Seven things to keep out, how to check data settings, and a team policy.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-phishing-how-to-protect-your-business/https://cyphrq.com/posts/ai-phishing-how-to-protect-your-business/AI made phishing fluent, personal and cheap. What protects a small business now, in order of impact, from passkeys to payment rules, with a 30-day plan.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/deepfake-scams-how-to-spot/https://cyphrq.com/posts/deepfake-scams-how-to-spot/How deepfake voice and video scams work today, why the old visual tells no longer hold, and the verification habits that protect families and businesses.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/on-device-ai-privacy/https://cyphrq.com/posts/on-device-ai-privacy/What on-device AI means, why it helps privacy, and when Apple, Microsoft, Google and local AI apps still send your data to the cloud.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/prompt-injection-explained/https://cyphrq.com/posts/prompt-injection-explained/Prompt injection in plain language: how hidden instructions trick AI tools, why AI agents raise the stakes, and five defences any manager can use.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/q-day-explained/https://cyphrq.com/posts/q-day-explained/Q-Day is when a quantum computer could break today's encryption. What it is, what NIST has standardised, and a practical checklist for you.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/uae-pdpl-and-ai-tools/https://cyphrq.com/posts/uae-pdpl-and-ai-tools/What the UAE Data Protection Law (PDPL) means for a business using AI tools: scope, consent, transfers, DIFC and ADGM, and a 7-question checklist.Sat, 24 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/quantum-error-correction-logical-qubits/https://cyphrq.com/posts/quantum-error-correction-logical-qubits/What a logical qubit is, why error correction matters, and what Google's Willow and other published milestones do and don't say about quantum risk.Mon, 19 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-27001-explained/https://cyphrq.com/posts/iso-iec-27001-explained/ISO/IEC 27001 explained: what the ISMS standard requires, how certification and surveillance audits work, and what changed in 2022.Thu, 15 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-31000-risk-management-explained/https://cyphrq.com/posts/iso-31000-risk-management-explained/ISO 31000:2018 is risk management guidance, not a certificate. What its principles, framework and process cover, and how it sits above ISO/IEC 27005.Wed, 14 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/auditing-user-access-reviews/https://cyphrq.com/posts/auditing-user-access-reviews/A user access review audit tests more than a signed spreadsheet. How to check the user list, spot rubber-stamping and test leavers.Tue, 13 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-and-jobs-what-the-research-says/https://cyphrq.com/posts/ai-and-jobs-what-the-research-says/Will AI replace jobs? The IMF, the ILO and Anthropic's usage data measure different things. Here is what each number means and how to use it.Mon, 12 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/cobit-2019-explained/https://cyphrq.com/posts/cobit-2019-explained/COBIT 2019 is ISACA's IT governance framework. What its 40 objectives and design factors are, whether you can be certified, and how auditors use it.Sat, 10 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/costa-rica-conti-ransomware-2022/https://cyphrq.com/posts/costa-rica-conti-ransomware-2022/How Conti's April 2022 ransomware attack hit Costa Rica's customs and tax systems, why a national emergency followed, and what to check.Sat, 10 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/inss-data-breach-anpd-sanction-2024/https://cyphrq.com/posts/inss-data-breach-anpd-sanction-2024/In 2022, valid credentials ran 90M+ queries on Brazil's INSS benefits system. What ANPD found, the sanction, and what to check in your own estate.Sat, 10 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/south-africa-justice-department-2021-breach/https://cyphrq.com/posts/south-africa-justice-department-2021-breach/Ransomware hit South Africa's Justice Department in 2021. The regulator found lapsed security licences and later issued a R5 million POPIA fine.Sat, 10 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-20000-1-it-service-management/https://cyphrq.com/posts/iso-iec-20000-1-it-service-management/ISO/IEC 20000-1 is the certifiable standard for IT service management. What it requires, how it differs from ITIL, and how certification works.Fri, 09 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-27035-incident-management-explained/https://cyphrq.com/posts/iso-iec-27035-incident-management-explained/ISO/IEC 27035 is guidance for handling security incidents. Its parts, lifecycle, how it compares with NIST SP 800-61, and reporting clocks.Fri, 09 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/singapore-pdpa-obligations-breach-notification/https://cyphrq.com/posts/singapore-pdpa-obligations-breach-notification/What Singapore's PDPA requires: core duties, the 3-calendar-day breach notification rule, PDPC penalties up to 10% of turnover, and a checklist.Fri, 09 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/sk-telecom-2025-usim-breach-pipc-fine/https://cyphrq.com/posts/sk-telecom-2025-usim-breach-pipc-fine/What was stolen in SK Telecom's 2025 USIM breach, how many subscribers were affected, what Korea's regulators found, and the PIPC's 134.8 billion won fine.Fri, 09 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/enisa-eu-cybersecurity-agency-explained/https://cyphrq.com/posts/enisa-eu-cybersecurity-agency-explained/ENISA is the EU Agency for Cybersecurity. What it does under the Cybersecurity Act, how EU certification schemes (EUCC, EUCS) work, and its reports.Thu, 08 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-27017-27018-cloud-standards/https://cyphrq.com/posts/iso-iec-27017-27018-cloud-standards/ISO/IEC 27017 covers cloud security controls; ISO/IEC 27018 covers personal data in public clouds. What each adds and what to ask providers.Thu, 08 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/singhealth-2018-breach-pdpc-penalty/https://cyphrq.com/posts/singhealth-2018-breach-pdpc-penalty/The 2018 SingHealth data breach hit about 1.5 million patients. How attackers got in, the S$1 million PDPC penalties, and lessons for IT teams.Thu, 08 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/uk-app-fraud-reimbursement-rules/https://cyphrq.com/posts/uk-app-fraud-reimbursement-rules/Since 7 October 2024, UK banks must reimburse most APP fraud on Faster Payments or CHAPS, up to £85,000. What is covered, the exceptions, and what to do.Thu, 08 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/dora-ict-risk-rules-financial-firms/https://cyphrq.com/posts/dora-ict-risk-rules-financial-firms/What DORA requires of EU financial entities since 17 January 2025: five pillars, the 4-hour and 24-hour incident clock and ICT provider oversight.Wed, 07 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/eu-mica-crypto-rules-explained/https://cyphrq.com/posts/eu-mica-crypto-rules-explained/MiCA is the EU's crypto rulebook. What applies since 2024, how CASP authorisation and the transition ended, the stablecoin rules, and what IT teams check.Wed, 07 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-27002-controls-explained/https://cyphrq.com/posts/iso-iec-27002-controls-explained/ISO/IEC 27002:2022 is guidance on security controls, not a certificate. How it relates to 27001 Annex A, its themes and attributes, and how to use it.Wed, 07 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/iso-iec-27005-risk-management-explained/https://cyphrq.com/posts/iso-iec-27005-risk-management-explained/ISO/IEC 27005:2022 is guidance, not a certificate. What its risk process covers, event-based vs asset-based approaches, and how it supports ISO 27001.Wed, 07 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/british-airways-2018-breach-ico-fine/https://cyphrq.com/posts/british-airways-2018-breach-ico-fine/How attackers skimmed British Airways card data in 2018, why the ICO fined £20m not £183.39m, and the controls the ICO says were missing.Tue, 06 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/gdpr-essentials-for-organisations/https://cyphrq.com/posts/gdpr-essentials-for-organisations/GDPR requirements for businesses in plain language: lawful basis, people's rights, the 72-hour breach report, data transfers, fines, and a checklist.Tue, 06 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/how-many-qubits-to-break-rsa-2048/https://cyphrq.com/posts/how-many-qubits-to-break-rsa-2048/Gidney's 2025 paper estimates under 1 million noisy qubits and under a week to factor RSA-2048, down from 20 million. What it assumes and what to do.Tue, 06 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/shadow-ai-at-work/https://cyphrq.com/posts/shadow-ai-at-work/Shadow AI at work is AI your team uses without approval. How to find it in consent, network and expense records, and what to offer instead.Tue, 06 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-data-centre-electricity-iea/https://cyphrq.com/posts/ai-data-centre-electricity-iea/Official US and Irish statistics on data-centre electricity demand, what they say about AI, and what IT teams should plan for.Mon, 05 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/chat-and-ask-ai-database-exposure-2026/https://cyphrq.com/posts/chat-and-ask-ai-database-exposure-2026/A researcher says a Firebase error left about 300 million Chat & Ask AI messages readable. What is confirmed, what is not, and what to check.Mon, 05 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/csa-cloud-controls-matrix-star/https://cyphrq.com/posts/csa-cloud-controls-matrix-star/The Cloud Security Alliance's CCM is a cloud control framework; STAR is the registry where providers publish proof. Levels, versions and reading an entry.Mon, 05 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/pci-dss-4-explained/https://cyphrq.com/posts/pci-dss-4-explained/PCI DSS v4.0.1 in plain terms: who it applies to, the 12 requirements, the 31 March 2025 deadline, and how SAQs, ROCs and merchant levels fit together.Mon, 05 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ai-labs-threat-reports-model-misuse/https://cyphrq.com/posts/ai-labs-threat-reports-model-misuse/What Anthropic and Google's threat reports say about AI model misuse: four cases, what the companies did, and what defenders should log and ask.Sun, 04 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/hugging-face-spaces-secrets-breach-2024/https://cyphrq.com/posts/hugging-face-spaces-secrets-breach-2024/What Hugging Face said about unauthorised access to Spaces secrets in May 2024, what is unknown, and how AI teams should handle tokens and CI/CD secrets.Sun, 04 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/red-blue-purple-teaming/https://cyphrq.com/posts/red-blue-purple-teaming/Red, blue and purple teaming explained, regulator-led tests such as CBEST, TIBER-EU and DORA TLPT, how to scope one, and what a good report contains.Sun, 04 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/ztna-vs-vpn-risks/https://cyphrq.com/posts/ztna-vs-vpn-risks/Why VPN appliances are a favourite way in, what zero trust network access changes, the order to migrate in, and what ZTNA does not fix.Sun, 04 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/cyber-insurance-what-to-cover/https://cyphrq.com/posts/cyber-insurance-what-to-cover/What cyber insurance covers: first- and third-party cover, business interruption, extortion, exclusions, underwriter questions and sizing a limit.Sat, 03 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/dlp-data-classification/https://cyphrq.com/posts/dlp-data-classification/Data loss prevention fails without data classification. A four-level scheme, where DLP sits, why false positives stall projects, and AI chat uploads.Sat, 03 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/fileless-attacks-living-off-the-land/https://cyphrq.com/posts/fileless-attacks-living-off-the-land/Fileless attacks run through tools already on your systems, such as PowerShell and WMI. Why antivirus misses them, and how to detect and respond.Sat, 03 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/quantum-sensing-and-networking/https://cyphrq.com/posts/quantum-sensing-and-networking/Quantum sensing and networking explained: NIST's record clock, a 35 km entanglement test in Boston, and why the UK NCSC backs PQC over QKD.Sat, 03 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/api-security-breaches/https://cyphrq.com/posts/api-security-breaches/How attackers pull data out through APIs, mapped to the OWASP API Security Top 10 2023, two documented cases, and the controls that work.Fri, 02 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/breach-detection-tools-explained/https://cyphrq.com/posts/breach-detection-tools-explained/What EDR, XDR, NDR, MDR, SIEM and deception tools each see, what they miss, and the telemetry and staff they need. With CISA and NIST sources.Fri, 02 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/cross-border-payments-partner-risk/https://cyphrq.com/posts/cross-border-payments-partner-risk/Cross-border payment risk is partner and settlement risk as much as hacking: prefunding, open limits, maker-checker gaps, nostro breaks and sanctions.Fri, 02 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/soc-requirements-gcc-india/https://cyphrq.com/posts/soc-requirements-gcc-india/What Saudi NCA controls, the UAE IA Regulation and RBI's bank framework require for monitoring, log retention and incident reporting, compared.Fri, 02 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/crypto-investment-fraud-fbi-ic3-data/https://cyphrq.com/posts/crypto-investment-fraud-fbi-ic3-data/FBI IC3 data puts US crypto investment fraud losses at $7.2bn in 2025. How the scams work, who loses most, crypto ATM risks, and the controls that help.Thu, 01 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/crypto-wallet-custody-security/https://cyphrq.com/posts/crypto-wallet-custody-security/How businesses keep crypto keys safe: hot, warm and cold wallets, multisig vs MPC, blind signing, key ceremonies, withdrawal controls and monitoring.Thu, 01 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/dark-web-explained/https://cyphrq.com/posts/dark-web-explained/The dark web explained: how it differs from the deep web, who uses it, what stolen data is sold there, and what to do if your company data shows up.Thu, 01 Oct 2026 00:00:00 +0000https://cyphrq.com/posts/soc-1-soc-2-soc-3-reports-explained/https://cyphrq.com/posts/soc-1-soc-2-soc-3-reports-explained/SOC 1 covers financial reporting controls, SOC 2 security and trust criteria, SOC 3 is the public summary. Plus Type 1 vs 2 and what to check.Thu, 01 Oct 2026 00:00:00 +0000