🧭 Three new pages on the blog
blog.cert-ix.com is no longer just the daily news feed. Three pages are now live there:
practical Cyber Awareness guides, a live Threat Intelligence map, and a Password
Generator that never sends anything anywhere. All three are free, public, and need no sign-up.
| Page | What it is for |
|---|---|
| Cyber Awareness | Evergreen how-to guides — protect yourself, your family, your business |
| Threat Intelligence | A live view of what is being attacked right now, worldwide |
| Password Generator | Strong passwords and passphrases, generated on your own device |
Cyber Awareness — guidance that stays true
News tells you what happened. These guides tell you what to do, and they are written to still be correct months later. They run from individual readers up to mid-market teams, and every guide carries its difficulty, its intended audience and an honest reading time before you commit to it. Sort by newest, oldest or most popular, and filter down to the ones written for you.
Two themes run through the collection:
- AI as defence — vetting an AI tool before your team pastes company data into it, turning off chat history so prompts stop training a model, checking assistant privacy settings on every device, fact-checking a chatbot answer before you act on it.
- AI threats — spotting an AI-generated photo or video before you share it, verifying a "family emergency" call before you wire money to a cloned voice.
The guides are drafted with AI assistance and reviewed by a human before publication. That is stated on the page itself, because you should know how anything you are asked to trust was made.
Threat Intelligence — the live view
blog.cert-ix.com/threat-intelligence
A world map of live threat indicators, fed by a streaming connection that keeps updating while the page is open, alongside a rolling feed of newly published CVEs.
- Filter by severity, by source, by attack category and by time window — the panel shows you how many indicators match, and how many of those can actually be placed on the map.
- Analytics for the overall picture: top attack categories, top countries, how the sources are distributed, how severity is distributed.
- Open any indicator for the detail behind the dot.
One design decision worth calling out: the connection status is always on screen — LIVE, RECONNECTING or DISCONNECTED. A dashboard that silently keeps showing the last thing it received is worse than one that tells you it has stopped listening. And indicators that carry no coordinates are not quietly dropped: the map says so, and they remain in the live feed.
Password Generator — nothing leaves the page
blog.cert-ix.com/password-generator
Random passwords and word-based passphrases, generated on your device. Nothing is sent, stored or logged. Load the page, disconnect from the network, and it still works.
What makes it worth using instead of the next one in the search results:
- Real randomness, or none at all. Values come from your operating system through the Web Crypto API. If a browser cannot supply it, the page refuses to generate rather than quietly falling back to something predictable.
- No modulo bias. Characters are drawn by rejection sampling, which avoids the subtle skew toward part of the alphabet that many generators carry without saying so.
- Strength in bits, not adjectives. The entropy figure is computed from the options you chose, not guessed by inspecting the finished text — and it is shown next to crack-time estimates for offline attack rates. Tighten a constraint that shrinks the search space, such as banning repeated characters, and the number goes down, honestly.
- Nothing persists. No browser storage, no history. Reload and every value is gone. Our own analytics are switched off on that page.
Plus the practical controls: password or passphrase mode, length, character classes, excluding
look-alike characters such as O/0 and I/l/1, banning runs like abc or 321, and
generating a batch at once.
Why these are public
None of them need to know who you are, so none of them ask. A guide is worth reading before you are a customer, a threat map is worth watching whether or not you have an estate with us, and a password is nobody's business but yours — least of all ours.