Threat research, regulatory analysis, and practical guidance on external attack surface management, threat intelligence, and European cybersecurity compliance.
Our analysis of 10,000+ organisations reveals the key trends shaping the external threat environment for European mid-market companies — from the rise of AI-assisted phishing to the expansion of ransomware targeting operational technology environments.
NIS2's Article 21 sets out specific cybersecurity measures that essential and important entities must implement. We break down what each requirement means in practice and how ThreatLens360 maps to them.
Certificate transparency logs are public — and threat actors use them to discover newly registered subdomains and services before you've had a chance to secure them. Here's how they do it, and how you can too.
The Digital Operational Resilience Act came into force in January 2025. This guide breaks down what financial entities need to do to meet the ICT third-party risk management requirements.
ThreatLens Scores change as your attack surface evolves. This post explains exactly what causes score changes — and what you can do to maximise your improvement trajectory.
When the MOVEit vulnerability was exploited, hundreds of European organisations discovered they had been affected through vendors they hadn't even monitored. We analyse how the attack unfolded and what better vendor risk management could have changed.
Dark web monitoring is now an essential security capability — but what does it actually mean to monitor the dark web, and what can you realistically expect to find? This primer explains the fundamentals.
Every Tuesday, we send a curated summary of the most important European cybersecurity developments — threats, regulatory updates, and practical guidance. No spam.
GDPR compliant. Unsubscribe at any time.