<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Skycisa</title><link>https://blog.skycisa.com/</link><description>Security, in perspective.</description><language>en</language><lastBuildDate>Tue, 13 Oct 2026 18:20:48 GMT</lastBuildDate><item><title>The breach starts before the malware</title><link>https://blog.skycisa.com/article/?slug=breach-before-malware</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=breach-before-malware</guid><description>Stolen sessions, trusted devices, and ordinary logins. Understanding the quiet first steps of an intrusion.</description><category>Investigations</category><pubDate>Sat, 10 Oct 2026 10:30:00 GMT</pubDate></item><item><title>A critical score is only the beginning of a patch decision</title><link>https://blog.skycisa.com/article/?slug=patch-priority-context</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=patch-priority-context</guid><description>Exposure, exploitation, and business context belong beside the severity number.</description><category>Vulnerabilities</category><pubDate>Sat, 10 Oct 2026 09:45:00 GMT</pubDate></item><item><title>Your backup is only as good as your last recovery rehearsal</title><link>https://blog.skycisa.com/article/?slug=ransomware-recovery-rehearsal</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=ransomware-recovery-rehearsal</guid><description>A practical look at restore tests, isolated copies, and the dependencies that get forgotten.</description><category>Security practice</category><pubDate>Sat, 10 Oct 2026 08:20:00 GMT</pubDate></item><item><title>The privacy question hiding in your data inventory</title><link>https://blog.skycisa.com/article/?slug=privacy-data-inventory</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=privacy-data-inventory</guid><description>Knowing where personal data lives is the first step toward keeping less of it.</description><category>Privacy</category><pubDate>Fri, 09 Oct 2026 16:40:00 GMT</pubDate></item><item><title>What makes a threat report useful to a small security team?</title><link>https://blog.skycisa.com/article/?slug=threat-intelligence-useful</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=threat-intelligence-useful</guid><description>Less noise, more relevance: turning outside reporting into a question you can investigate.</description><category>Threat intelligence</category><pubDate>Fri, 09 Oct 2026 14:15:00 GMT</pubDate></item><item><title>Passkeys change sign-in. Recovery still needs a plan.</title><link>https://blog.skycisa.com/article/?slug=passkeys-recovery</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=passkeys-recovery</guid><description>The overlooked paths around a strong authentication method.</description><category>Security practice</category><pubDate>Fri, 09 Oct 2026 11:00:00 GMT</pubDate></item><item><title>Software supply chains run on trust. Make that trust visible.</title><link>https://blog.skycisa.com/article/?slug=supply-chain-trust</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=supply-chain-trust</guid><description>Understanding who can change the code, packages, and build steps your organization relies on.</description><category>Investigations</category><pubDate>Thu, 08 Oct 2026 15:35:00 GMT</pubDate></item><item><title>A good incident timeline separates facts from assumptions</title><link>https://blog.skycisa.com/article/?slug=incident-timeline</link><guid isPermaLink="true">https://blog.skycisa.com/article/?slug=incident-timeline</guid><description>How to keep an investigation understandable while the evidence is still changing.</description><category>Threat intelligence</category><pubDate>Thu, 08 Oct 2026 10:10:00 GMT</pubDate></item></channel></rss>
