ai-agentsai-securitygovernance
AI agents may have more access than employees
Employees get onboarding, approvals and access reviews. AI agents, automations and API integrations often get broad access with none of that.
4 min czytania
Blog
Wiedza o cyberbezpieczeństwie, NDR i zgodności
ndrgovernancemid-market
The biggest cyber risk is what you fail to see
More layers of protection create a feeling of control. Real control needs visibility into what happens between systems, users and suppliers.
4 min czytania
post-quantumpqccryptography
Inwentaryzacja kryptografii z ruchu sieciowego
Jaką część inwentaryzacji kryptografii (CBOM) da się zbudować pasywnie z handshake'ów TLS i SSH, czego nie widać i jak uzupełnić luki.
3 min czytania
shadow-aiai-governanceinventory
Jak znaleźć shadow AI w firmie
Inwentaryzacja usług AI w siedmiu krokach: umowy, konsole administracyjne, zgody OAuth, DNS i ruch sieciowy, komputery programistów i rozmowy z zespołami.
3 min czytania
post-quantumpqcml-kem
ML-KEM i ML-DSA po ludzku
Co robią ML-KEM (FIPS 203) i ML-DSA (FIPS 204), jak zastępują RSA i krzywe eliptyczne, czym jest hybrydowe X25519MLKEM768 w TLS i po co duże klucze.
3 min czytania
post-quantumpqccryptography
Kryptografia postkwantowa: od czego zacząć
Unijna mapa drogowa PQC, CNSA 2.0 i NIS2 zaczynają od inwentaryzacji kryptografii. „Harvest now, decrypt later”, ML-KEM po ludzku i plan migracji.
6 min czytania
shadow-aiai-governancegdpr
Shadow AI w firmie: czym jest i jak je wykryć
Czym jest shadow AI, dlaczego ma znaczenie dla RODO, AI Act i NIS2, jak wykryć je w sieci bez agenta na każdym urządzeniu i lista kontrolna polityki AI.
5 min czytania
evidenceincident-responsecompliance
Evidence: the next cybersecurity category
After an incident, green dashboards and approved policies answer nothing. Why the ability to prove what happened is becoming a category of its own.
4 min czytania
quantumpost-quantumndr
Quantum risk is already hidden in your network
Quantum risk starts when a company does not know which cryptography protects its data. How certificates, keys and old protocols hide in the network.
5 min czytania
quantumpost-quantumndr
Quantum is a signal that we need to see more
Quantum computing is moving from labs into strategy. For companies, the first step is not new algorithms but seeing where cryptography is used.
4 min czytania
ndrevidenceincident-response
Your network has a memory
Every connection, supplier login and data flow leaves a trace. Why reading your network's history turns scattered signals into context and evidence.
5 min czytania
network-monitoringsmbndr
PRTG, Auvik or NDR for a small business network?
Performance monitoring and threat detection answer different questions. PRTG, Auvik and NDR compared from public sources, for a small IT team.
4 min czytania
ndrai-securitysupply-chain
The next breach may not look like an attack
A supplier connection, a service account or an AI tool reading documents can all look normal. Why the next breach may hide inside legitimate activity.
4 min czytania
nis2germanycompliance
NIS2 in Germany: what the BSIG asks of networks
Germany's NIS2 law has applied since 6 December 2025: who it covers, BSI registration, the 24-hour reporting chain and what it means for monitoring.
5 min czytania
nis2polandcompliance
NIS2 w Polsce: co oznacza nowelizacja ustawy o KSC
Znowelizowana ustawa o KSC wdraża NIS2 od 3 kwietnia 2026 r.: kogo obejmuje, terminy zgłoszeń, środki zarządzania ryzykiem i monitorowanie sieci.
4 min czytania
nis2spaincompliance
NIS2 in Spain: where transposition stands
Spain has not yet transposed NIS2: the draft cybersecurity law, the Commission's referral to the Court of Justice, what applies today and what to prepare.
4 min czytania
post-quantumquantumgovernance
Your cryptography is already a business risk
Certificates, VPNs, keys and legacy protocols used to be invisible to boards. Post-quantum migration makes cryptography a business risk to manage now.
4 min czytania
vulnerabilityopensshlinux
sshole (CVE-2026-123158): sprawdź swoją sieć
Obejście hasła w OpenSSH na Linuksie z musl bez PAM, np. Alpine. Kogo dotyczy, 10-minutowa kontrola dla administratora, poprawka i co widzi monitoring.
6 min czytania
ndrgovernanceevidence
A green dashboard is not security
No critical alerts and no open incidents can mean the tools see nothing, not that nothing happens. Why a green dashboard is a dangerous comfort signal.
4 min czytania
quantumpost-quantumgovernance
Quantum computers already exist
Quantum computers are real, even if they are not in offices yet. What that means for cryptography, long-lived data and business planning today.
3 min czytania
post-quantumquantumgovernance
Post-quantum starts today
Treating post-quantum cryptography as a distant problem is the biggest mistake. Why inventory, migration planning and supplier questions start now.
5 min czytania
evidencegovernancecompliance
Cybersecurity versus digital trust
Customers and regulators do not ask about protocols. They ask whether their data was safe. How cybersecurity becomes digital trust you can prove.
5 min czytania
governanceai-securitypost-quantum
Does Europe need its own digital trust layer?
AI, cybersecurity and post-quantum readiness all rest on trust. Why European companies need verifiable evidence rather than vendor promises.
6 min czytania
ot-icsndrsupply-chain
Can a factory see an attack before it stops?
OT attacks begin with small changes: a workstation calling a new service, a supplier logging in at night. How passive monitoring can spot them early.
8 min czytania
ai-securityndrincident-response
AI-powered attacks may outpace your visibility
AI lets attackers automate reconnaissance, phishing and lateral movement. Why detection that waits for a known signature falls behind.
8 min czytania
quantumpost-quantumndr
Quantum exposure before the first attack
Quantum-era attacks may look like ordinary encrypted traffic. Why companies can be exposed long before any breach, and what to inventory first.
8 min czytania
incident-responseevidencendr
The next cyber risk is what you cannot see
The costliest moment after an incident is not the alert but the answer “we do not know what happened.” Why visibility and evidence decide the outcome.
8 min czytania
quantumpost-quantumgovernance
Quantum risk begins with data collected today
Harvest now, decrypt later: encrypted data captured today may be readable once quantum computers mature. Why long-lived secrets need a plan now.
8 min czytania
compliancenis2governance
AI Act, NIS2, DORA, CRA: what is coming
Four EU laws reach business owners through audits, customers, suppliers and everyday AI use. What the AI Act, NIS2, DORA and the CRA mean in practice.
7 min czytania
shadow-aiai-securitygovernance
AI in a company does not start with a strategy
It starts with an employee pasting a contract or customer data into a chat tool. Why shadow AI is a data-protection issue before it is a strategy.
8 min czytania
ransomwarendrincident-response
How to protect a company from ransomware
Ransomware does not start with encryption. It starts days earlier with access, reconnaissance and lateral movement. Where to look before the ransom note.
7 min czytania
supply-chainnis2ndr
Will the attack start with you or your supplier?
IT providers, integrators and maintenance partners connect to your network every day. Why supplier access is a common way in, and how to watch it.
7 min czytania
evidenceincident-responsendr
Does your company have alerts or evidence?
Charts of alert counts impress in a board meeting but answer none of the questions after an incident. The difference between alerts and evidence.
7 min czytania
incident-responseevidencenis2
The worst answer after an incident: we don't know
When the board asks what happened, “we don't know” is the costliest answer. What a company needs to reconstruct an incident and report it on time.
8 min czytania
ndrincident-responsemid-market
A quiet network does not mean a safe company
No red screens and no ransom note do not prove that nothing is happening. How modern incidents start with small changes, and how to notice them early.
8 min czytania
ndrincident-responsegovernance
Not another alert: who sees the risk first
Companies rarely lose because they had no tools. They lose because they saw too late. Why early visibility, not alert volume, decides an incident's cost.
6 min czytania
governancendrmid-market
Security, or just a sense of security?
A firewall, antivirus, backups and an IT provider can create a feeling of control without real visibility. How to tell the difference in your company.
9 min czytania
governancenis2compliance
Is the board liable for an undetected attack?
NIS2 makes management bodies accountable for cybersecurity measures. What that means when an attack goes undetected, and what boards should ask for.
7 min czytania
evidencecompliancesupply-chain
Is your customers' data really secure?
When a major client asks whether their data is safe with you, “we have a firewall” is not an answer. What evidence customers now expect to see.
7 min czytania
ndrevidencegovernance
Your systems work. But are they secure?
Production runs and invoices go out while an intruder may already be mapping the network. Why “it works” is not evidence of security, and what is.
7 min czytania
governancemid-marketndr
Blockbuster, Netflix and your cyber risk
Blockbuster had stores, customers and a working model, and still lost to a change it did not take seriously. The same blind spot applies to cyber risk.
11 min czytania
governancemid-marketndr
Czego historia telefonu uczy o cyberochronie
Nowe technologie często przegrywają na starcie, bo ocenia się je miarą starego świata. Co ta lekcja znaczy dla firm, którym firewall wciąż wystarcza.
7 min czytania
mid-marketndrnis2
Mid-sized company, big risk
Mid-sized firms hold real data, customers and integrations but rarely a security team. Why the mid-market still postpones cybersecurity, and at what cost.
8 min czytania
governancendrcompliance
You cannot manage risk you cannot see
Risk management built on documents and procedures misses what happens in the network today. Why visibility is the precondition for managing cyber risk.
8 min czytania
incident-responseransomwaregovernance
How does a company operate during an attack?
An attack rarely stops everything at once. How companies keep operating during an incident, and why early visibility decides how much is lost.
7 min czytania
governancenis2evidence
Cybersecurity the board can understand
Boards do not need more acronyms or red dashboards. They need answers about business impact, evidence and responsibility. How to translate cyber risk.
6 min czytania
supply-chainnis2ndr
Your supplier has a key to your company
IT providers, integrators and SaaS tools hold access to your systems. Why supplier access is part of your own risk, and how to see what it does.
7 min czytania
nis2incident-responsecompliance
Who must report a cyber incident?
Under NIS2 and GDPR, reporting clocks start when you become aware of an incident. Who must report, to whom, and why detection decides the timeline.
7 min czytania
mid-marketsupply-chainnis2
Small company, big cyber responsibility
Small firms are links in larger supply chains, so customers and regulators increasingly expect them to show real security, not just a firewall.
6 min czytania
ai-agentsai-securitygovernance
AI agents are new employees. Who monitors them?
AI agents read documents, call APIs and trigger processes without a manager. Why they need the same oversight as staff, and what monitoring should show.
9 min czytania
nis2compliancegovernance
Does your company fall under new EU cyber rules?
NIS2, DORA, the CRA and the AI Act reach further than many boards expect, often through customers and suppliers. How to tell whether they apply to you.
10 min czytania
supply-chainnis2evidence
Logistics under the pressure of cyber evidence
Logistics runs on APIs, scanners, TMS, WMS and partner portals. Why customers and NIS2 now expect logistics firms to show what happens in their networks.
11 min czytania
ndrsupply-chainmid-market
Who is really inside your network?
Guests, suppliers, IoT devices, remote staff and cloud services share one network. Why many companies no longer know who is actually connected.
9 min czytania
ndrincident-responseevidence
Cichy atak: gdy nic nie wygląda podejrzanie
Najgroźniejsze ataki nie zaczynają się od żądania okupu. Jak ciche włamania rozwijają się tygodniami i dlaczego trzeba umieć odtworzyć ich przebieg.
6 min czytania
mid-marketndrcompliance
Hotel jako cyfrowa infrastruktura zaufania
Dane gości, płatności, Wi-Fi, systemy rezerwacji i dostawcy: dlaczego hotel stał się infrastrukturą cyfrową i co widoczność sieci znaczy dla zaufania.
7 min czytania
evidencecompliancesupply-chain
Cyber evidence: nowy język zaufania w Europie
Certyfikaty i ankiety dla dostawców nie wystarczają już do budowania zaufania między firmami. Dlaczego weryfikowalne dowody stają się przewagą.
7 min czytania
ndrgovernancenis2
Shadow IT: what the documentation does not show
Documentation rarely matches the network that actually runs. How shadow IT appears, why it matters under NIS2 and how network monitoring shows the gap.
7 min czytania
ndrnis2compliance
Network monitoring and European cyber resilience
Why continuous network monitoring is becoming a layer of European cyber resilience next to firewalls, EDR and backups, and what NIS2 changes.
6 min czytania
governancenis2ndr
Cybersecurity is no longer just an IT problem
A firewall, antivirus and backups no longer answer what boards, customers and regulators ask. Why cyber risk has become a management responsibility.
5 min czytania
ndrnis2incident-response
Breached days ago, and still nobody knows
An intruder can move through a network for days before anyone notices. Why detection speed decides whether you can meet the NIS2 24- and 72-hour clocks.
5 min czytania
ndrpricingbuyers-guide
Ile kosztuje NDR? Modele cenowe wyjaśnione
NDR wycenia się za urządzenie, IP, przepustowość lub wolumen danych. Jak działa każdy model, co publikują Darktrace, Vectra AI i ExtraHop i o co pytać.
4 min czytania
ndredrsiem
NDR, EDR, SIEM, XDR i MDR: czym się różnią
Czym NDR różni się od EDR i SIEM: co każde widzi, czego nie widzi, gdzie pasują XDR i MDR i od czego zacząć, gdy firma nie ma SOC.
3 min czytania
nis2network-monitoringchecklist
Monitoring sieci pod NIS2: lista kontrolna
Praktyczna lista kontrolna monitoringu sieci pod NIS2 dla działów IT średnich firm: czego wymagają art. 21 i 23, co monitorować i jakie dowody zachować.
4 min czytania
launchndrnis2
Introducing NetSenX, NDR for the EU mid-market
Why we built NetSenX: behavioural network detection that explains every alert, keeps data in the EU and tracks NIS2 reporting deadlines.
2 min czytania