<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>CyberElo Blog</title>
  <link>https://www.cyberelo.ca/en/blog/</link>
  <atom:link href="https://www.cyberelo.ca/en/blog/feed.xml" rel="self" type="application/rss+xml"/>
  <description>Analysis, field notes and good practice in cybersecurity.</description>
  <language>en-CA</language>
  <item>
    <title>Cloned badges, held doors: what a physical intrusion test reveals</title>
    <link>https://www.cyberelo.ca/en/blog/physical-intrusion-testing/</link>
    <guid>https://www.cyberelo.ca/en/blog/physical-intrusion-testing/</guid>
    <pubDate>Tue, 27 Oct 2026 12:00:00 GMT</pubDate>
    <description>A physical intrusion test is not about catching your staff out. It shows whether your controls and reporting reflexes hold up against a motivated intruder.</description>
  </item>
  <item>
    <title>Ransomware: the decisions of the first hours</title>
    <link>https://www.cyberelo.ca/en/blog/ransomware-first-hours/</link>
    <guid>https://www.cyberelo.ca/en/blog/ransomware-first-hours/</guid>
    <pubDate>Tue, 20 Oct 2026 12:00:00 GMT</pubDate>
    <description>The first hours of a ransomware attack shape how long the outage lasts and how good the investigation will be. The right reflexes, and the ones to avoid.</description>
  </item>
  <item>
    <title>Internal penetration testing: why we leave your EDR on</title>
    <link>https://www.cyberelo.ca/en/blog/edr-active-internal-pentest/</link>
    <guid>https://www.cyberelo.ca/en/blog/edr-active-internal-pentest/</guid>
    <pubDate>Tue, 06 Oct 2026 12:00:00 GMT</pubDate>
    <description>Switching off the EDR during a penetration test gives you a longer report, but a less accurate picture of your real exposure. Here is how we approach it.</description>
  </item>
</channel>
</rss>
