Insights & News
Articles, analysis and current affairs across cybersecurity, trustworthy data, analytics, research methods and responsible technology.
Cornerstone content
Durable, practical guidance across Solid Elf’s core security and data work.
Blog
24 articles
Cybersecurity News
23 Oct 2026Two critical flaws in PHP have triggered urgent patching worldwide. The bigger issue is what AI-assisted exploit development means for the speed and scale of future cyber attacks.
Read article →
Cybersecurity News
23 Oct 2026Two critical PHP flaws, dubbed PHP2Shell, have raised questions for WordPress site owners. The risk depends on the PHP environment beneath the site, who manages it, and whether the hosting provider has already patched or mitigated the issue.
Read article →
Cybersecurity News
19 Oct 2026A campaign targeting more than 100 websites has pushed autonomous offensive AI from theory into practice, with agents handling much of the reconnaissance and exploitation workflow.
Read article →
Cybersecurity News
19 Oct 2026Ahold Delhaize’s prolonged systems disruption shows how quickly a cyber incident can move from IT containment into online ordering, distribution and day-to-day retail operations.
Read article →
Cybersecurity News
19 Oct 2026Nikkei’s third breach disclosure in roughly a month points to a wider identity-security problem, not just a series of isolated incidents.
Read article →
Responsible AI
17 Oct 2026A practical decision process for using AI at work without turning a useful shortcut into an uncontrolled data disclosure.
Read article →
Digital Safety
17 Oct 2026AI makes impersonation easier to produce. A safer payment process starts with how a request is verified, not how convincing it looks.
Read article →
Research
17 Oct 2026Use Zotero to organise references, then add the human checks that connect every important claim to evidence you have actually inspected.
Read article →
Cybersecurity News
17 Oct 2026The ConnectWise Cloud Backup incident shows how a trusted cloud integration can become a route into many customer environments at once.
Read article →
Cybersecurity
17 Oct 2026Prompt injection becomes a business problem when an assistant can act. Start with permissions, approval points and recoverable workflows.
Read article →
Cybersecurity News
16 Oct 2026Millions of California student records were exposed through a contractor system, showing how much sensitive education data can accumulate outside the institutions that originally collected it.
Read article →
Cybersecurity News
16 Oct 2026A contractor cyber incident disrupted online services used by U.S. federal bankruptcy courts, underlining how third-party systems can become single points of operational failure.
Read article →
Cybersecurity News
15 Oct 2026BeyondTrust disclosed a critical Remote Support flaw after evidence that attackers had already been exploiting it, putting self-hosted remote-administration systems under immediate pressure.
Read article →
Threat Intelligence
14 Oct 2026Combine careful verification, stronger access controls, and a clear reporting process.
Read article →
Cybersecurity
14 Oct 2026Hardware keys and passkeys are only part of the work. Enrollment, recovery and legacy access determine whether the rollout holds up.
Read article →
Privacy Engineering
14 Oct 2026Test usefulness and disclosure risk against a defined purpose before treating synthetic records as safe.
Read article →
Cybersecurity
14 Oct 2026A hands-on review framework for object ownership, tenant separation, sensitive fields and background jobs.
Read article →
Data Governance
14 Oct 2026Move from a policy document to clear ownership, access decisions, retention rules, and review routines.
Read article →
Field Security
14 Oct 2026Plan for offline work, lost devices, safe transfers, and clear incident reporting.
Read article →
Cybersecurity
14 Oct 2026A practical approach to recovery dependencies, isolated backups, clean restoration and exercises that expose the gaps.
Read article →AI Assurance
14 Oct 2026Connect model approval to documented purpose, evaluation, oversight, and monitoring.
Read article →
Security Engineering
14 Oct 2026A practical review of access, sensitive data, dependencies, and recovery before a service goes live.
Read article →
Cybersecurity
14 Oct 2026How to organise decisions, preserve useful evidence and contain harm without losing the operational picture.
Read article →
Cybersecurity News
13 Oct 2026A cyberattack on supermarket refrigeration systems in France turned a digital weakness into spoiled stock and immediate operational disruption.
Read article →