Ten cybersecurity stories from the last day, with what happened and what to do about it.

Most cloud mess-ups are not exotic. They come down to three plain mistakes: too many people can do too much, storage got left open, and nobody is keeping the logs. Here is each one, and how to fix it.

The cyber kill chain, in plain English: the seven stages of an attack, what happens at each one, and where defenders get to break the chain.

A cyber incident response plan only works if people can find it and have practiced it. Here is the lean-team version: a plan, a drill and backups you have restored.

Zero trust architecture in plain English: what NIST actually says, why the old network perimeter broke, and how to start small without buying a thing first.

Directors do not want a tour of your tools. Open with the decision, show a few numbers that mean something, and skip the doom.

SOC 2 and ISO 27001 are two different kinds of proof. Here is the plain-english way to tell them apart and pick the one to do first.

The cloud provider secures the platform. You configure your side. Here are the three settings mistakes behind most cloud mess-ups, and how to check each one.

A forgotten third-party app with broad permissions is a door attackers can walk through at machine speed. Here is how to check yours.