NextGarrison Security Blog
The latest vulnerabilities and threats, plus plain-English guides to penetration testing, compliance, AI security and incident response.
Actively Exploited Vulnerabilities: What to Patch Now (November 2026)
Critical vulnerabilities attackers are exploiting now: PHP2Shell, Citrix NetScaler, Ivanti, OpenSSH SSHole, PAN-OS, Cisco, Outlook, Chrome and SonicWall, with fixes.
NextGarrison Security Team · · 8 min read
Threats & Vulnerabilities
The latest critical vulnerabilities, ransomware campaigns and breaches, explained in plain English with what to patch and what to check.
Actively Exploited Vulnerabilities: What to Patch Now (November 2026)
Critical vulnerabilities attackers are exploiting now: PHP2Shell, Citrix NetScaler, Ivanti, OpenSSH SSHole, PAN-OS, Cisco, Outlook, Chrome and SonicWall, with fixes.
· 8 min read
Threats & VulnerabilitiesPHP2Shell (CVE-2026-109618 and CVE-2026-109619): What It Is and How to Fix It
PHP2Shell is a pair of PHP remote code execution flaws exploited in the wild since October 2026. Who is affected, the fixed PHP versions and how to check for compromise.
· 6 min read
Threats & VulnerabilitiesRansomware News: Record Attacks, New Groups and Big Breaches (Autumn 2026)
Ransomware hit record levels in Q3 and October 2026. The biggest attacks and breaches, the most active groups, how attackers got in and what to do about it.
· 7 min read
Penetration Testing
How penetration testing works, what it costs, how to scope it and how to get real value from the report.
How Much Does a Penetration Test Cost?
What drives penetration test pricing, typical cost ranges by test type, how to compare quotes and how to avoid paying for a scan dressed up as a pentest.
· 6 min read
Penetration TestingPenetration Testing as a Service (PTaaS) vs an Annual Pentest
What penetration testing as a service (PTaaS) is, how it differs from a one-off annual pentest, how each is priced and how to choose the right model for your team.
· 6 min read
Penetration TestingPenetration Testing Methodology: PTES Stages and Standards Explained
Penetration testing methodology explained: the seven PTES stages, how OWASP WSTG, OSSTMM and NIST SP 800-115 fit, black vs gray box, and what a report needs.
· 7 min read
Compliance
SOC 2, ISO 27001, PCI DSS and GDPR readiness: what each framework asks for and how to get audit-ready.
Does SOC 2 Require a Penetration Test?
SOC 2 does not strictly require a penetration test, but auditors and customers usually expect one. What to test, when to test and what the report should include.
· 5 min read
ComplianceHow to Tell Customers Your SOC 2 Is Underway (and Use It to Win Deals)
How to tell customers your SOC 2 is underway but not yet complete: what you can share, what you must not claim, a sample email and how to use SOC 2 in sales.
· 7 min read
ComplianceISO 27001 vs SOC 2: Which One Do You Need?
ISO 27001 vs SOC 2 compared: certification vs attestation, who asks for each, cost and timeline, how much they overlap and which to do first.
· 6 min read
AI Security
Prompt injection, AI agents, LLM app security and AI red teaming for teams shipping AI features.
AI Coding Agents Under Attack: Plugin4Shell, MCP Flaws and How to Protect Developers
AI coding assistants were hit by a wave of flaws in 2026, from Plugin4Shell to MCP command execution. What happened and how to protect your developers.
· 7 min read
AI SecurityWhat Is AI Red Teaming? A Guide for Teams Shipping LLM Features
AI red teaming explained: how attackers misuse chatbots, AI agents and RAG systems, what the OWASP Top 10 for LLM Applications covers and how a test works.
· 7 min read
AI SecurityWhat Is Prompt Injection? Direct and Indirect Attacks Explained with Examples
What is prompt injection? Direct and indirect prompt injection explained with realistic examples, why it is hard to prevent, layered defenses and how to test.
· 8 min read
SOC & Incident Response
Detection, 24/7 monitoring, incident response plans and recovery, from the people who run a SOC.
Disaster Recovery Planning: RTO, RPO, Backups and How to Build a DR Plan
A practical guide to disaster recovery planning: RTO and RPO with examples, the 3-2-1 backup rule against ransomware, cloud DR options and how to test a plan.
· 7 min read
SOC & Incident ResponseIncident Response Plan Template: The NIST Lifecycle, Roles and Playbooks
An incident response plan template built on the NIST lifecycle: team roles, severity levels, playbooks for ransomware and BEC, and notification deadlines.
· 8 min read
SOC & Incident ResponseManaged SOC vs MDR: What Is the Difference and Which Do You Need?
Managed SOC, MDR and MSSP explained in plain English: what each covers, how they respond to threats and how to choose the right 24/7 monitoring for your company.
· 6 min read
Security Basics
Clear explanations of common attacks and practical security habits for teams of every size.
20 Cybersecurity Tips for Small and Mid-Size Businesses
Cybersecurity tips for small and mid-size businesses: 20 practical steps for passwords, phishing, devices, backups, cloud, staff and incident response.
· 7 min read
Security BasicsHow to Spot a Phishing Email: Red Flags, Examples and What to Do
How to spot a phishing email: a red flag checklist, five realistic phishing scams explained, and exactly what to do if you already clicked the link.
· 6 min read
Security BasicsWhat Is a Man-in-the-Middle Attack? How It Works and How to Stop It
What is a man-in-the-middle attack? How MITM works, from evil twin Wi-Fi and ARP spoofing to phishing that steals MFA sessions, plus signs and prevention.
· 6 min read
iGaming Security
Security and audit readiness for online casinos, sportsbooks and game providers: UKGC, MGA and GLI.
Casino and Sportsbook Cyber Attacks in 2026: What Operators Can Learn
Cyber attacks hit casinos and betting platforms throughout 2026, from cash-only shutdowns to World Cup bot floods. What happened and the controls operators need now.
· 6 min read
iGaming SecurityGLI-19 Standards Explained: A Plain-English Guide for iGaming Platforms
What GLI-19 covers, how it differs from GLI-33 and GLI-11, what labs test on an interactive gaming platform and how to prepare your system for certification.
· 6 min read
iGaming SecurityMGA System Audit Checklist: How to Prepare Your Gaming Platform
A practical checklist to prepare for a Malta Gaming Authority system audit: scope, documentation, security controls, logging and the evidence auditors ask for.
· 5 min read