Latest Articles

Key Takeaways Prompt Injection vs Jailbreaking: Both are different threats. Jailbreaking targets safety training. Prompt injection exploits architecture. Most teams defend against one while being completely exposed to the other. Your System Prompts Won’t Protect You. Hardening prompts doesn’t stop prompt injection. An attacker can bypass weeks of engineering by hiding instructions in a document […]

A connected medical device can expose far more than patient data. A successful attack could interrupt treatment, alter device behaviour, or prevent clinicians from accessing essential functions. An FDA-aligned medical device cybersecurity risk assessment helps you identify possible attack paths, evaluate their effect on safety and performance, and select controls that reduce risk before submission. […]

2nd Healthcare data breaches reported to the HHS Office for Civil Rights totaled 319 incidents affecting 500 or more individuals between January 1 and May 31, 2026, according to the HHS OCR breach portal. A growing share traces back to cloud-hosted systems: remote patient monitoring platforms, cloud-connected imaging systems, or SaaS quality management tools storing […]

A medical device may be ready for hospitals, clinics, or distributors, but Saudi market entry begins much earlier than the first shipment. It begins with whether the device can meet the Saudi Food and Drug Authority’s (SFDA) MDMA requirements. The timing matters. Saudi Arabia’s medical devices market was valued at around USD 13.54 billion in […]

AI SAST (Static Application Security Testing) is a type of static application security testing that uses machine learning algorithms to detect vulnerabilities in source code, rather than relying solely on static rules. It identifies security vulnerabilities before executing the code, significantly lowers false positives, and comprehends context that normal scanners may overlook. With the rise […]

Medical device companies spent years working under QSR. That changed on February 2, 2026, when the FDA’s Quality Management System Regulation (QMSR), as outlined in the FDA QMSR guidance, officially took effect. For some organizations, the transition has been fairly straightforward. Others are discovering that records, supplier oversight, software validation, inspection preparation, and quality documentation […]

Getting through the Crest Cyber Essentials Questionnaire takes more than copying information from an old asset list or relying on general security policies. Your answers need to reflect the systems your organisation actually uses and show that the required controls are working across the selected scope. This guide is based on the Danzell Question Set […]

Choosing a cybersecurity provider, particularly for CREST cyber security services, often requires more trust than evidence. Similar service lists and polished claims reveal little about a company’s technical competence, ethical conduct, data protection controls, or ability to produce reports your team can act on. That uncertainty is growing. Recent research found that 79% of organisations […]

The crest penetration testing methodology gives structure to an engagement without forcing every system through the same technical routine. Testing an API is not the same as assessing a mobile application, cloud environment, web application, or network. Penetration testing is changing fast. AI now supports parts of the process that once depended entirely on manual […]