mindflayer
Hive Mind
Actively exploited
  • Recently added vulnerabilities that are being exploited in the wild, from CISA's Known Exploited Vulnerabilities catalog.

Source: CISA KEV catalog (opens in new tab). EPSS: estimated chance of exploitation in the next 30 days, from FIRST.org (opens in new tab). Information only, not advice for your environment. Talk to us if you're affected.

Provider incidents

From each provider's public status page, checked every 3 hours. Microsoft 365 shows the public consumer feed; business tenants should check their admin center.

Join the Hive Mind

The full daily brief by email: 5 to 10 exploited vulnerabilities, outages and headlines, in one short read.

What you get, and Pro →
Resources

Practical security, free to use.

Tools, guides and short reads for IT leaders and the business owners they support.

Daily brief

The Hive Mind

Exploited vulnerabilities, provider outages and security headlines, in one short daily email.

Join the Hive Mind →
Demo

GapMap Demo

A demo version with made-up data: see how GapMap finds the devices your EDR, patching and remote support tools are each missing, matched against Active Directory and ranked by fix.

Explore the demo →
Demo

IdentityMap Demo

A demo version with made-up data: see how IdentityMap finds the Microsoft Entra ID accounts an attacker would go for first, from admins without MFA to Conditional Access gaps and stale accounts, ranked by fix.

Explore the demo →
Free tool

Email & Domain Security Check

Grade your domain's SPF, DKIM, DMARC, DNSSEC and MTA-STS in seconds, with plain-language fixes.

Run the check →
Guide

SPF, DKIM & DMARC for Microsoft 365

Step-by-step setup with the exact records, from monitoring to full enforcement.

Read the guide →
Guide

SPF, DKIM & DMARC for Google Workspace

The same rollout for Google Workspace, including third-party senders.

Read the guide →
Newsletter

Field Notes

One short email every other week: a real-world attack technique and the exact fix.

Subscribe →
Coming soon

Toolkits

Security policy pack, ransomware tabletop kit and email security kit, built on public frameworks.

See toolkits →
Coming soon

More free checks

Website security headers and a cyber insurance readiness quiz.

All tools →
Services

Rather have it done for you?

Our consultants can assess, fix and operate it for you.