Clear Path Security
Segmenting OT networks with the Purdue model and IEC 62443 zones
Operational technology (OT) segmentation is often discussed as if it were a single design choice, but in[…]
Vulnerability disclosure and patch management best practice for UK SMEs
Key takeaways Keep vulnerability disclosure and patch management in one joined-up process so reports are logged, assessed,[…]
Testing LLM applications for prompt injection with open-source tooling
Prompt injection testing is now a practical part of securing LLM applications, especially where a model can[…]
Designing least privilege access using IAM and RBAC
Least privilege is one of those security principles that sounds simple until you try to implement it[…]
Detecting Golden Ticket and Silver Ticket attacks in Kerberos logs
Kerberos remains one of the most important identity protocols in Windows environments, which is why forged ticket[…]
Secure design reviews and architecture checkpoints in the SDLC
Secure design reviews and architecture checkpoints in the SDLC For many UK SMEs, security work becomes most[…]
Managing end-of-life software risks for UK SMEs
End-of-life software is one of those issues that often stays hidden until it becomes expensive. A system[…]
Automating incident response to reduce impact for UK SMEs
For many UK SMEs, the biggest cost of a cyber incident is not just the attack itself.[…]
Preventing dependency confusion in npm and PyPI pipelines
Dependency confusion is a supply chain issue that affects how package managers choose where to download a[…]
Automated forensics and rapid evidence collection techniques for technical teams
When an incident is unfolding, the first challenge is often not analysis. It is getting reliable evidence[…]