Guides

Evergreen, sourced answers to the questions that come up between editions: what a tool, directive or routine is, and how security leaders actually use it. 6 guides so far.

1. 
   BeyondTrust Remote Support flaw: what CISA says to patch, hunt and rotate

   CISA says CVE-2026-102764 in BeyondTrust Remote Support is under active exploitation. Here is its guidance on patching, compromise checks and credential rotation.

   Published October 24, 2026

2. 
   CISA on BeyondTrust Remote Support: patch, hunt and contain CVE-2026-102764

   CISA's October 16, 2026 alert on CVE-2026-102764 in BeyondTrust Remote Support: affected versions, patching, forensics and exposure limits.

   Published October 24, 2026

3. 
   SafePay ransomware: what the CISA/FBI advisory says and how to defend

   How SafePay breaks in, spreads, steals data and extorts victims, and which mitigations in the October 2026 CISA/FBI advisory to put first.

   Published October 22, 2026

4. 
   EO 14028, 14144, 14306 and 14412: the federal cybersecurity deadlines still ahead

   Four executive orders set the federal cybersecurity deadlines still ahead, most already passed. Two OMB memos and a fourth order add 2026-2027 dates, plus 2030 and 2031.

   Published October 13, 2026

5. 
   CVE, CVSS, KEV, EPSS and 27 more: a sourced security glossary

   31 security terms CISOs run into daily — CVE, CVSS, KEV, EPSS, ransomware, phishing and more — each defined from NIST, the FBI, CISA, FIRST.org or Microsoft's own pages.

   Published October 11, 2026

6. 
   What is CISA KEV, and how do CISOs use it?

   CISA's KEV catalog lists flaws attackers are already exploiting. BOD 26-04 (June 10, 2026) replaced the old flat deadlines with a four-factor, risk-tiered patching clock.

   Published October 7, 2026