Cursor Launches git.exe from Repository Root on Windows
Mindgard: Cursor on Windows executes local repo git.exe without prompt. Reported Dec 2025, still unpatched as of July 2026. Policy and AppLocker mitigations available.
SecurityToday - The security briefing for IT decision-makers
The Briefing/Critical vulnerabilities · 14 days/Actively exploited/21 new · 7 days
Threat Trend
Critical vulnerabilities · 14 days5
3
1
0
3
4
6
7
5
2
0
4
19
2
Fri
Sun
Tue
Thu
Sat
Mon
Today
Actively exploitedCritical (CVSS ≥ 9)
Source: CISA KEV · NVD · As of 15.07.2026
Our analysis
Practice & Implementation
All articles
When Attackers Are Faster Than the Patch
Between disclosure and exploitation of a vulnerability, only days often pass today. The State of Vulnerabilities Report 2026 reveals what matters now.
Mini Shai-Hulud: npm worm devours the supply chain
Mini Shai-Hulud spreads itself via npm and PyPI: How the supply-chain worm steals tokens and what security teams need to secure now.
Protective DNS: the layer that many overlook
Almost every attack begins with a DNS request. How Protective DNS blocks malware and phishing early, and why DNS over HTTPS fills the gap.
Strategy & Governance
All articles
Weakest Supplier Opens Critical Facility
The KRITIS roof law makes supplier reliability a mandatory duty for operators. Governance roadmap to registration.
The concentration risk no supplier audit sees
Why single audits miss concentration risk and how a board steers concentration and fourth-party risk.
WhatsApp in the Workplace: Which Messenger Will Replace It
Private WhatsApp use in companies is a compliance risk. Which criteria a business messenger must meet and which alternative truly works.
Case Studies
All articles
Nihon Kotsu: Dispatch Disrupted After Malware Attack
Nihon Kotsu reports malware on July 11, 2026. Dispatch systems offline, AiLock ransom claim filed July 15. Case study with key lessons for control …
Northern German Workshop Adopts DataManagement as a Service for M365 Backup from Pink Elephant
M365 Backup via DataManagement as a Service: A social institution uses Pink Elephant for data backup, recovery and German hosting.
Südwestfalen IT: The Lesson of Municipal IT
Two years after the Southwestphalia IT attack, Security Today dissects: VPN without MFA, rebuilding without ransom, and five lessons for municipal IT.
Most Read
- 01
- 02
- 03
- 04
- 05
Security Glossary
All termsKey security terms explained in a compact, citable format: definition, context and the questions that keep coming up.
NIS2
The EU directive that turns cybersecurity into a boardroom matter for thousands of companies. Who it covers and when evidence falls due.
Read the entry →
DORA
The resilience standard for the financial sector. Which artefacts the regulator wants to see and who shares liability in the supply chain.
Read the entry →
Zero Trust
No device and no user is trusted automatically. What the principle really means in daily practice.
Read the entry →
Ransomware
Extortion through encryption, increasingly even without it. How a modern attack unfolds and what stops it.
Read the entry →
Passkey / FIDO2
The passwordless login, bound to device and biometrics. Why it pulls the ground out from under phishing.
Read the entry →
Post-Quantum-Kryptografie
Encryption that holds up even against the quantum computer. Why the transition starts now.
Read the entry →
