<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Blog on SpectrumSec</title><link>https://spectrumsec.eu/blog/</link><description>Recent content in Blog on SpectrumSec</description><generator>Hugo</generator><language>en-GB</language><atom:link href="https://spectrumsec.eu/blog/index.xml" rel="self" type="application/rss+xml"/><item><title>Board Briefing — September 2026: patched is not the same as safe</title><link>https://spectrumsec.eu/blog/2026/board-briefing-2026-09/</link><pubDate>Sat, 10 Oct 2026 10:00:00 +0300</pubDate><guid>https://spectrumsec.eu/blog/2026/board-briefing-2026-09/</guid><description>Remote-access gateways were exploited for weeks before a fix existed. Plus: new EU reporting duties with a 24-hour clock, and a record quarter for ransomware.</description></item><item><title>Why reporting rate beats click rate in phishing simulations</title><link>https://spectrumsec.eu/blog/2026/reporting-rate-beats-click-rate/</link><pubDate>Sat, 22 Aug 2026 10:00:00 +0300</pubDate><guid>https://spectrumsec.eu/blog/2026/reporting-rate-beats-click-rate/</guid><description>Click rate is the metric everyone reports and the one that matters least. Here is the case for optimising how fast your people report instead.</description></item><item><title>Introducing the SpectrumSec blog</title><link>https://spectrumsec.eu/blog/2026/introducing-spectrumsec/</link><pubDate>Sat, 15 Aug 2026 09:00:00 +0300</pubDate><guid>https://spectrumsec.eu/blog/2026/introducing-spectrumsec/</guid><description>Why we are publishing, what you can expect here, and how this blog is built and maintained.</description></item></channel></rss>