Briefings & field notes
The Nexus Academy blog
Explainers and practical guidance on cybersecurity, compliance, cloud and AI — written for people who have to implement it.
Compliance & GRC AI Security & Governance Blue Team & SOC Cloud & Container Security Network Security OT, ICS & IoT Security Careers & Certification Newsletter
-
How to study for Security+ without memorising a glossary
SY0-701 rewards understanding scenarios more than reciting definitions. Study accordingly.
-
Breaking into cybersecurity in 2026: what actually moves the needle
The entry-level market is crowded and the advice is contradictory. Four things still separate candidates who get hired.
-
CIS Benchmarks are a build standard, not a document
Hardening that is applied once and never enforced is hardening that lasted about a fortnight.
-
A connected device is four attack surfaces in one plastic shell
Hardware, firmware, radio and cloud. Miss any one of them and the product is not assessed.
-
In OT, availability is safety and patching is a negotiation
Industrial security is not enterprise security applied to strange hardware. The priorities are inverted.
-
Zero Trust is an identity project wearing a network costume
ZTNA, SASE and SD-WAN only make sense once you accept that the control point moved from the wire to the identity.
-
Nobody hires you for the tools. They hire you for the architecture
Listing SIEM, EDR and SOAR on a CV is easy. Explaining how they fit together is what gets the offer.
-
Your ATT&CK heat map is probably lying to you
Coverage claimed from vendor datasheets is not coverage. Emulation is the only honest measurement.
-
Automate the alert you have already triaged four hundred times
SOC burnout is rarely caused by hard problems. It is caused by easy problems arriving relentlessly.
-
Reading Solidity like an auditor
Smart contract review is not code review with extra steps. The threat model, the tooling and the report are all different.
-
Kubernetes defaults are convenient, not safe
A fresh cluster is a flat network of over-privileged pods. Four changes close most of the distance to production-ready.
The Nexus Signal
Get these briefings by email
One short cybersecurity email a week. Free, unsubscribe any time.