https://plain-security.fyi/ en Two-minute security briefings for the board: how it breaks, what stops it, one suggested first step. The sound of the briefing videos on plain-security.fyi. Plain Security false https://plain-security.fyi/email-security/ plain-security-email-security Tue, 03 Nov 2026 10:54:04 GMT Interception, tampering, spoofing and man-in-the-middle. What each costs, what stops it. 48 https://plain-security.fyi/cookies/ plain-security-cookies Wed, 04 Nov 2026 13:35:25 GMT How stolen or intercepted cookies enable account takeover, bypass MFA, and impersonate users on trusted downstream systems. 47 https://plain-security.fyi/tls-cipher-suites/ plain-security-tls-cipher-suites Wed, 04 Nov 2026 13:35:25 GMT A layer deeper into encryption in transit: weak suites, downgrades and key exchange. What to ask of IT. 46 https://plain-security.fyi/ransomware/ plain-security-ransomware Wed, 04 Nov 2026 13:35:25 GMT One stolen login, four steps to a standstill. What happens at each step, what breaks the chain. 45 https://plain-security.fyi/blast-radius/ plain-security-blast-radius Wed, 04 Nov 2026 13:35:25 GMT One breach becomes a total outage — unless networks are segmented, admin is tiered, and permissions are minimal. The difference between an incident and a crisis. 44 https://plain-security.fyi/phishing/ plain-security-phishing Wed, 04 Nov 2026 13:35:25 GMT Fake login pages, MFA fatigue, CEO fraud and every other channel. What one click can and cannot do. 43 https://plain-security.fyi/identity/ plain-security-identity Wed, 04 Nov 2026 13:35:25 GMT Reused passwords, phone-read codes, leavers and standing admins. Who can get in, who can do anything. 42 https://plain-security.fyi/entra/ plain-security-entra Wed, 04 Nov 2026 13:35:25 GMT Global Admins, an open Conditional Access gate, guests who never left, and the hybrid sync back door. 41 https://plain-security.fyi/iam/ plain-security-iam Wed, 04 Nov 2026 13:35:25 GMT Orphaned service accounts, wildcard roles, one person with both signatures, shared admin logins. With examples. 40 https://plain-security.fyi/supply-chain/ plain-security-supply-chain Wed, 04 Nov 2026 13:35:25 GMT Breached through someone we trust: vendor updates, supplier logins, open-source code and SaaS leaks. 39 https://plain-security.fyi/cloud/ plain-security-cloud Wed, 04 Nov 2026 13:35:25 GMT The cloud is secure, our settings are not. Four mistakes behind most cloud breaches, and what prevents each. 38 https://plain-security.fyi/shared-responsibility/ plain-security-shared-responsibility Wed, 04 Nov 2026 13:35:25 GMT The provider secures the cloud, you secure what you put in it. Where the line sits for IaaS, PaaS and SaaS. 37 https://plain-security.fyi/assurance-reports/ plain-security-assurance-reports Wed, 04 Nov 2026 13:35:25 GMT Your supplier sent a 90-page assurance report. Which type it is, what period and scope it covers, the controls it assumes you run, how to read the exceptions, and what a clean opinion never tells you. 36 https://plain-security.fyi/insider/ plain-security-insider Wed, 04 Nov 2026 13:35:25 GMT Four people who already have the keys: leaver, careless colleague, unwatched admin, pressured employee. 35 https://plain-security.fyi/ddos/ plain-security-ddos Wed, 04 Nov 2026 13:35:25 GMT Offline without a break-in. Floods, fake shoppers, one DNS provider, extortion, what keeps us up. 34 https://plain-security.fyi/expiry/ plain-security-expiry Wed, 04 Nov 2026 13:35:25 GMT Could we go offline because somebody forgot to renew something? Domains, DNS and certificates all carry a date, and public certificates shrink to 47 days by 2029. 33 https://plain-security.fyi/patching/ plain-security-patching Wed, 04 Nov 2026 13:35:25 GMT Known hole, published fix, still open. Four ways patching fails, and the one control that closes each. 32 https://plain-security.fyi/ai-vulnerability-remediation/ plain-security-ai-vulnerability-remediation Wed, 04 Nov 2026 13:35:25 GMT How automated and AI vulnerability remediation actually works: ranking, bots and AI that write the fix, auto-merge and poisoned updates, and fixing agents with too much access. 31 https://plain-security.fyi/edge-devices/ plain-security-edge-devices Wed, 04 Nov 2026 13:35:25 GMT VPN and firewall appliances are the most common way in. Who owns the box, is it patched, is the admin page on the internet, and what zero trust changes. 30 https://plain-security.fyi/php2shell/ plain-security-php2shell Wed, 04 Nov 2026 13:35:25 GMT Two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) can let anyone run code on a web server without logging in. Update, find old PHP, and ask your suppliers. 29 https://plain-security.fyi/connectwise-cloud-backup/ plain-security-connectwise-cloud-backup Wed, 04 Nov 2026 13:35:25 GMT Attackers stole the keys of a trusted Microsoft 365 backup app and signed in as the app, with no user and no MFA, helped by AI agents. What it means for you, and the questions worth asking. 28 https://plain-security.fyi/backups-and-restore/ plain-security-backups-and-restore Wed, 04 Nov 2026 13:35:25 GMT If ransomware hits tonight, how long until we are back? Recovery targets in plain words, the copy an attacker cannot delete, the restore nobody tested, and the cloud data nobody backs up. 27 https://plain-security.fyi/shadow-it/ plain-security-shadow-it Wed, 04 Nov 2026 13:35:25 GMT Company data in tools nobody approved, accounts nobody manages, apps nobody revoked. How to see it again. 26 https://plain-security.fyi/ai-security/ plain-security-ai-security Wed, 04 Nov 2026 13:35:25 GMT Public chatbots, hijacked assistants, cloned voices and confident nonsense. What each costs, what contains it. 25 https://plain-security.fyi/ai-sandboxing/ plain-security-ai-sandboxing Wed, 04 Nov 2026 13:35:25 GMT Where should an AI agent be allowed to run? A throwaway machine with its own kernel, no standing keys, a closed door to the internet, and a person at every exit. 24 https://plain-security.fyi/ai-agents/ plain-security-ai-agents Wed, 04 Nov 2026 13:35:25 GMT How AI agents such as Claude Code, Codex and Hermes Agent work: the model and the harness, agents, skills and MCP servers, why to review skills and servers before installing, and what keeps them contained. 23 https://plain-security.fyi/cloud-sovereignty/ plain-security-cloud-sovereignty Wed, 04 Nov 2026 13:35:25 GMT Sovereign from whom? The EU's own yardstick, the law that follows the provider, what still leaves with your SaaS, and whether you could leave. 22 https://plain-security.fyi/cada-vs-sovereignty-framework/ plain-security-cada-vs-sovereignty-framework Wed, 04 Nov 2026 13:35:25 GMT The Commission's SEAL ladder and the proposed law's four assurance levels. What each is, how the levels work, who would have to comply, three examples. 21 https://plain-security.fyi/encryption-at-rest/ plain-security-encryption-at-rest Wed, 04 Nov 2026 13:35:25 GMT Encrypted, so safe? Only against a stolen disk. Logins, keys, forgotten copies, and what quantum really changes. 20 https://plain-security.fyi/quantum-and-ai/ plain-security-quantum-and-ai Wed, 04 Nov 2026 13:35:25 GMT Encrypted today, decrypted tomorrow. How quantum computers and AI together threaten current encryption, and why migration must start now. 19 https://plain-security.fyi/web-security/ plain-security-web-security Wed, 04 Nov 2026 13:35:25 GMT Injection, forgotten plugins, account takeover and skimmed checkouts. Four ways in, one control each. 18 https://plain-security.fyi/endpoints/ plain-security-endpoints Wed, 04 Nov 2026 13:35:25 GMT Lost laptops, unmanaged phones, admin for everyone, an outdated browser. Where the data really lives. 17 https://plain-security.fyi/data/ plain-security-data Wed, 04 Nov 2026 13:35:25 GMT Crown jewels nobody can name, forty copies, links for anyone, data kept fifteen years. How to see it again. 16 https://plain-security.fyi/detection/ plain-security-detection Wed, 04 Nov 2026 13:35:25 GMT Logs nobody kept, alerts nobody read, half the estate unwatched, tickets read Monday. Would we notice? 15 https://plain-security.fyi/ot-iot/ plain-security-ot-iot Wed, 04 Nov 2026 13:35:25 GMT Production lines, building systems and cameras that cannot be patched. Four ways they stop, one fix each. 14 https://plain-security.fyi/secure-development/ plain-security-secure-development Wed, 04 Nov 2026 13:35:25 GMT Secrets in code, a hijacked build server, testing after launch, apps nobody owns. What closes each gap. 13 https://plain-security.fyi/code-security/ plain-security-code-security Wed, 04 Nov 2026 13:35:25 GMT Your own code, open-source parts, server templates and container images: where security flaws hide, and how to tell which ones matter. 12 https://plain-security.fyi/pentest/ plain-security-pentest Wed, 04 Nov 2026 13:35:25 GMT The pentest came back fine. Are we safe now? What was tested and when, how much the tester knew, findings that never get fixed, and the difference between a scan, a pentest and a red team. 11 https://plain-security.fyi/security-governance/ plain-security-security-governance Wed, 04 Nov 2026 13:35:25 GMT What should we spend, who should the CISO report to, and which numbers should the board see every quarter? Budget benchmarks, the CISO's independence, five numbers for the dashboard, external review, and what NIS2 and DORA ask of the board. 10 https://plain-security.fyi/acquisitions/ plain-security-acquisitions Wed, 04 Nov 2026 13:35:25 GMT When you buy a company, you also buy its network, its accounts, its data and whoever is already inside. An inherited attacker, the estate nobody listed, connecting on day one, warranties and insurance, and the personal data that comes with the deal. 9 https://plain-security.fyi/terraform-state/ plain-security-terraform-state Wed, 04 Nov 2026 13:35:25 GMT What Terraform state is, why it holds the map of your infrastructure and often its passwords, locking and versions, the chicken-and-egg of where it lives, and HCP Terraform, GitLab, S3 and Azure compared. 8 https://plain-security.fyi/cra/ plain-security-cra Wed, 04 Nov 2026 13:35:25 GMT We sell products with software in them. What the CRA asks of makers, importers and resellers: reporting since September 2026, CE mark and support period from December 2027. 7 https://plain-security.fyi/incident-response/ plain-security-incident-response Wed, 04 Nov 2026 13:35:25 GMT Who decides, what gets wiped, who says what, who to call. How the first three days derail. 6 https://plain-security.fyi/cyber-insurance/ plain-security-cyber-insurance Wed, 04 Nov 2026 13:35:25 GMT The policy is a control with small print. Questionnaire, exclusions, sub-limits, notification: what each costs. 5 https://plain-security.fyi/nis2-dora/ plain-security-nis2-dora Wed, 04 Nov 2026 13:35:25 GMT The law now names the board. Four things that changed, and what has to be in place before the audit. 4 https://plain-security.fyi/cbw-wwke/ plain-security-cbw-wwke Wed, 04 Nov 2026 13:35:25 GMT Two Dutch laws started on 15 August 2026: one for cyber, one for physical resilience. Which one applies to you, what differs, and the one board decision that covers both. 3 https://plain-security.fyi/board-as-target/ plain-security-board-as-target Wed, 04 Nov 2026 13:35:25 GMT Board members are a route in: private mail and phones, a cloned voice on a call, the board pack, and travel. Four routes, and what closes each. 2 https://plain-security.fyi/auth-protocols/ plain-security-auth-protocols Wed, 04 Nov 2026 13:35:25 GMT OAuth2, SAML, OIDC, mTLS, passkeys, Kerberos, LDAP, RADIUS, API keys and AI agents. When to use each, where it breaks, and what AI changes. 1