GDPR

Sessions

• AI-Assisted Triage and Tier-1 SOC Staffing This Quarter

  GDPR

• Block WhatsApp Web at the proxy, or advise and accept — the CERT-In warning?

  GDPR

• Pink vishing enrolled an attacker's passkey — full IR or contain two accounts?

  GDPR

• SimpleHelp RMM under exploitation — full compromise assessment or scoped IOC sweep?

  GDPR

• A managed extension allowlist for everyone, after the PolinRider spread?

  GDPR

• Certify the SOP or run a gap sprint before NIS2's October culmination?

  GDPR

• Suspend the email-triage AI agent, or filter and continue — the MemGhost prompt-injection?

  GDPR

• Make brand-impersonation monitoring a standing requirement after the SCATMAN hijacks?

  GDPR

• Is Fortinet's interim hotfix enough to keep FortiClient EMS internet-facing?

  GDPR

• Replace branch-office routers this quarter, or accept the LapDogs ORB-network risk?

  GDPR

• Re-delegate sixty domains this sprint, or wait for quarterly hygiene — Sitting Ducks?

  GDPR

• Offline rebuild tonight or VPN-restrict — the published Gitea/Docker auth bypass?

  GDPR

• Hardened travel devices or Lockdown Mode — the Pegasus finding?

  GDPR

• Remediate to the CNIL bar before the audit, after the IQVIA fine?

  GDPR

• Does last week's NetScaler patch call still stand — re-evaluating the CitrixBleed-again decision?

  GDPR

• Pin every GitHub Action to a SHA this sprint — the TeamPCP harvest?

  GDPR

• Re-enable Copilot for the exec team — after the SearchLeak finding?

  GDPR

• Force Chrome restarts today, or let the V8 zero-day fix auto-update?

  GDPR

• Revoke the PyPI tokens now despite the retaliation threat — the Hades extortion?

  GDPR

• Let the coding agent auto-merge, or gate every PR — after the Copilot jailbreak?

  GDPR

• World Leaks published 'proof' of the Tata breach — what do we tell the client?

  GDPR

• Fund the data-exfiltration detection programme this quarter?

  GDPR

• Novo Nordisk refused to pay — what does the one-month outcome tell the board?

  GDPR

• TeamPCP poisoned two tools in our CI — how far does our exposure response go?

  GDPR

• Emergency-patch our legacy ColdFusion apps against CVE-2026-48282, or contain them?

  GDPR

• Adopt a standing comply-first policy for undisclosed vendor emergency orders?

  GDPR

• Where does this year's last €800k of security capital go?

  GDPR

• Emergency-patch our internet-facing NetScaler Gateways against CVE-2026-8451?

  GDPR

• Three device-code phishing reports — disable the OAuth device flow now?

  GDPR

• Accept ServiceNow's assurance on the unauthenticated-API incident, or push back?

  GDPR

• Keep AI coding assistants enabled for all forty developers?

  GDPR

• 2026-07-02

  GDPR

• 2026-06-30

  GDPR

• 2026-06-26

  GDPR

• 2026-06-22

  GDPR

• 2026-06-10

  GDPR

• 2026-06-05

  GDPR

• 2026-06-04

  GDPR

• 2026-06-03

  GDPR

• 2026-06-03

  GDPR

Decision Records