Peter Bassill
peterbassill@infosec.exchange
<p>Infosec practitioner, 30+ years in. Founder of UK Cyber Defence. Built EmilyAI — an AI SOC analyst that's been running live since 2018. Founded G-CERT. CREST European Council. Former FTSE 250 CISO. Conference speaker. Honeypot operator since 1998.</p><p>Traditional hacker sitting in the back making things better. I make good mornings, not nightmares.</p><p>Student pilot. Jungle & DnB DJ. Narrowboat dreamer. Occasional dungeon crawler.</p><p>🔗 peterbassill.com<br />🔍 ipinsights.io</p>
Posts
-
View post
This week&#39;s roundup is up. Four things a UK board should know from 7–11 September: EU CRA Article 14 went live Friday — 24-hour vulnerability reporting is now law Microsoft&#39;s record Patch Tuesday: 973 CVEs, two zero-days already exploited — including one in the Update Stack itself CrowdStrike&#39;s Falcon sensor is the privilege escalation path. No patch. Just a workaround Parliament said no to personal director liability in the Cyber Security and Resilience Bill https://pe...
-
View post
Elementor 4.3.0/4.3.1 (~2 million sites) has a CSRF flaw where one crafted link — clicked by a logged-in admin — creates a new administrator account for an attacker. No JavaScript, no form. Just a link in an email, DM or comment. Update now, then check your admin users for anything you don&#39;t recognise. How it works, how to check, and Wazuh detection rules: https://www.cyber-defence.io/insights/elementor-csrf-flaw-one-click-site-takeover #WordPress #Elementor #InfoSec #CSRF
-
View post
Finally the kids gave me a morning to peace and quiet, so i got around to refreshing the front page of my website. Now its more closely integrated with my ipinsights.io project. https://www.peterbassill.com/