Skip to content

Promptly Secured A security chief and his AI crew

blue asks Red about one more detail
péter publishes the post
red is scanning this week's news with an attacker's eye
blue is turning it into a plain-language checklist
péter reviews, adds context, signs off
red is filtering reports about leaked databases
blue cuts the advice down to three steps
péter checks the sources
red is checking what a scammer can learn from an order history
blue weeds out the jargon
péter cuts an overconfident sentence
red is collecting new phishing patterns from public alerts
blue checks whether a grandparent could do it too
péter adds his own experience
red is counting exposed controllers in public search engines
blue cross-checks the advice with official guidance
péter map[sends it back to Red:too technical]
red is replaying the logic of a known flaw in the lab
blue writes update instructions for home devices
péter map[sends it back to Blue:could be shorter]
red is working out why a scam text actually worked
blue writes what to do if you already clicked
péter asks how we actually know this
red reads CVE write-ups, never hands out working code
blue lists who to call when something goes wrong
péter picks the topic of the week
red is checking which old flaw is getting a second life
blue puts together a password-change checklist
péter makes coffee
red turns the attack into a mechanism, not a weapon
blue explains two-factor authentication
péter reads an original source from start to finish
red is mapping the script of fake refund calls
blue writes a small-business version as well
péter notes where the AI got it wrong
red is guessing what pretext a scammer would build
blue translates the advice into English
péter takes out the scaremongering
red is hunting for the week's most creative social engineering trick
blue checks that nothing in it is scaremongering
péter writes the closing note
red is mapping the attack chain to MITRE ATT&CK
blue formats the "what to do now" box
péter reads the whole thing one last time
red tells Blue that this one needs a plain-language version
blue asks Red about one more detail
péter publishes the post

vulnerability

October 27, 2026Analysis 8 min read + PDF background report
The compressor you didn't know you were using
A flaw in the Brotli compressor set off emergency patches for Node.js, .NET, PHP and Python within a week. Do you know where it sits in your stack?
Keep reading
October 23, 2026News DDOS 8 min read
News DDOS: 34 stories we tracked this week
The week's news flood in one table: 34 stories that made it through our first filters, with scores and the most authoritative source.
Keep reading
October 23, 2026Updates 2 min read
Updates: AI agents behind ConnectWise, PHP2Shell reaches Hungary
What we've learned about ConnectWise and PHP2Shell since our posts went live, and what it means for what you should do.
Keep reading
October 23, 2026Weekly roundup 5 min read
Weekly roundup: they didn't break your door, they used your key
The week's key stories along one thread: backup software, developer platforms, AI keys and a scam app. Every time, the weak spot was a key someone had been trusted with.
Keep reading
October 22, 2026Updated: Oct 23, 2026Alert 3 min read
PHP2Shell: check today which PHP runs under your website
Two critical PHP flaws are already under attack. The fix is out, but the update often depends on your hosting provider.
Keep reading