Stories · PB Security

Reduce Your Risk Why is a password-cracking rig running local LLMs? Simon shares how Bambino evolved from a password-cracking rig into PB’s local LLM environment, giving us greater control over sensitive information. October 2026 · Simon

Validate Your Defences Ten years of hacking and defending How many routes to privileged access did an attacker have in 2015, and how many are there now? August 2026 · PB Security

Validate Your Defences The first hour Most organisations survive a crisis. So what does preparedness actually buy you? The difference is never survival. It is the first hour. August 2026 · Allan Bjerre

Understand Your Exposure I did not read a book this summer Can my organisation adopt AI without creating new security risks? This summer I stopped reading about AI and started building with it. August 2026 · Allan Bjerre

Build Lasting Resilience Do you need a CISO, but not a full-time position? Who owns your security strategy when nobody's job title says they do? One or two days a month. May 2026 · PB Security

Reduce Your Risk Can we crack your passwords? Would your password policy hold if somebody actually tested it? In one engagement we recovered 67.3% of the passwords, on entirely ordinary patterns. April 2026 · Slavi Parpulev

Build Lasting Resilience Unresolved risk is a transformation waiting for permission Who in your organisation is actually allowed to fix the risks you already know about? The gap between knowing and acting is a management decision. April 2026 · Allan Bjerre

Understand Your Exposure The illusion of resilience When did you last question whether your security posture matches your actual risk? Most executives carry more risk than they realise, and can absorb less. April 2026 · Allan Bjerre

Understand Your Exposure The risks of Sites.Read.All Which applications can read every SharePoint site and every OneDrive folder in your tenant? One permission grants all of it, and it looks reasonable. February 2026 · Slavi Parpulev

Validate Your Defences Assume Breach If an attacker were already inside tonight, how far could they get before anyone noticed? February 2026 · PB Security

Validate Your Defences A CIS 18 assessment may be the wake-up call you need You have firewalls, policies, MFA and audits. Do you know whether any of it performs in a real attack? That is not the same question as compliance. November 2025 · Allan Bjerre

Build Lasting Resilience Have you met DORA and NIS2? Would your governance survive an audit if the regulator arrived this quarter? They have started. October 2025 · Allan Bjerre

Reduce Your Risk Password guidance What password policy should you actually run? Here are the lengths we recommend for users, admins and service accounts, and the work that sits beside them. September 2025 · Slavi Parpulev

Build Lasting Resilience Alerting on changes to Exchange Online threat policies Would you know if somebody weakened your Exchange Online threat policies? The log exists, but only once you have switched the collection on. August 2025 · Slavi Parpulev

Curious about practical security?