Field notes from the donation-fraud trenches.

Two recent ACSC advisories describe an active exploitation campaign against Wordpress and other CMS platforms, with compromised legitimate Australian websites already delivering malware to visitors. Charity donation forms are the highest value target on any charity website. Here is what to check this week, in fifteen minutes.

The cohort report should be a thing you check daily, not a quarterly project that needs SQL and an analyst. Atlas runs every night across nine dimensions, refreshes the numbers, narrates what changed, and lands the biggest mover in your morning digest. Here is how it works.

Card-testing attacks target charity donation forms because they're an easy mark. Here are the five fingerprints to check for in the next five minutes and what to do if you spot one.

The story behind Cause Shield — why charities run serious infrastructure with almost no way to see what's going wrong, and why we built one platform to monitor it, alert on it, and make sense of it all.