Security awareness tips, industry news, and product updates.
In eight days, the EU Cyber Resilience Act reaches its first hard deadline: manufacturers of products with digital elements must report actively exploited vulnerabilities within 24 hours of awareness. The reporting platform is ready. The question is whether your people are.
October's Cybersecurity Awareness Month is won or lost in September. A practical four-week preparation plan covering goals, a baseline phishing simulation, the content calendar, executive sponsorship and how you will measure success.
HHS has pushed final action on the proposed HIPAA Security Rule overhaul to July 2027, and more than 100 hospital systems want it withdrawn entirely. But the current rule remains actively enforced, including its security awareness training requirement. Relaxing now is the wrong lesson.
September brings the year's biggest wave of new starters - and attackers time their CEO impersonation campaigns to match. Why the first 90 days are the most phishable window of any tenure, and how to protect the whole incoming cohort.
The empowsec developer documentation portal at /docs walks Reseller and Company API integrations from first key to production - with guides, endpoint references, webhook docs, error codes, and a changelog.
On November 10, 2026, CMMC Phase 2 begins: DoD contracts involving CUI can require third-party Level 2 certification instead of self-assessment. With roughly 80,000 companies needing certification and only about 80 authorized assessors, the countdown is very real.
Security budget growth has slowed to a five-year low, and every line item now needs hard numbers behind it. Here is the ROI evidence CISOs and MSPs can use to defend - and grow - the human risk budget this planning season.
For the first time, UK managed service providers face statutory security duties and a two-stage incident reporting regime. The Cyber Security and Resilience Bill has cleared the Commons and is progressing through the Lords. Here is what MSPs should be doing now.
Before SSO or automated onboarding can trust an email domain, empowsec asks you to prove you own it - with a DNS TXT record or a hosted verification file, checked in seconds from the settings page.
New global research shows 45% of SMBs suffered a cyber-incident in the past year, yet 75% feel confident in their resilience - and confidence actually rises among repeat victims. What the confidence paradox means for MSPs selling security awareness.
The European Supervisory Authorities have published the first annual report on major ICT incidents under DORA: 3,383 reports in 2025, most from the credit and payments sectors. Here is what the numbers show, and why the 4-hour reporting clock depends on people as much as process.
Every back-to-school season brings a surge of phishing aimed at schools, universities and students - and the lures land in corporate inboxes too. What the latest data shows and how to prepare your workforce before the wave peaks.