719 articles · Page 1 of 36
SCKit hit 288 hosts across 48 organisations via ScreenConnect on the 11th of November. Luna Moth is back at law firms. And a Check Point zero-day is being exploited for root access right now.
Read more →
Attackers are hijacking the same tool your IT provider uses to fix your computers. And if you have a Synology NAS, your files may already be exposed.
Read more →
Two active campaigns are turning legitimate remote access tools against the businesses they're supposed to protect. Here is what that means for UK SMBs.
Read more →
Your MSP's remote monitoring platform may have been offline this week for a reason. Here is what happened, what it means, and what to do about it.
Read more →
Your MSP's remote management platform may be the door attackers walk through. Two stories today that every UK small business owner should hand to their IT provider.
Read more →
1,093 CVEs. One zero-day confirmed exploited. Four flaws that could destroy a small business network. Here is the patch order you actually need.
Read more →
Two actively exploited vulnerabilities confirmed this week. One targets Outlook, one targets Chrome. Both are on every UK small business machine right now.
Read more →
Attackers are actively exploiting Barracuda email gateways for root access. Chrome has its eighth zero-day this year. Turla is reading government email. Three things that need your attention today.
Read more →
33 critical vulnerabilities in a tool that sits inside your network with admin-level access. Your MSP's platform. This is not a drill.
Read more →
Three threats converge today: backup software being weaponised against MSP clients, hotel reservation phishing with surgical personalisation, and Microsoft bouncing legitimate email from domains with weak authentication.
Read more →
Three confirmed, actively exploited vulnerabilities. SonicWall VPNs, Apple devices, WordPress sites. If you use any of these, read this before Friday.
Read more →
APT29 is targeting mobile devices via compromised websites. Exposed refrigeration controllers are running spam infrastructure. And email-based phishing hit 7.3 billion detections in Q3 2026.
Read more →
A patch that doesn't patch. An Apple flaw being actively exploited. And ChatGPT quietly leaking your conversations. Here's what matters this week.
Read more →
Three threats with direct UK SMB exposure today: APT29 mobile watering holes, a patched Zyxel network switch zero-day, and a phishing kit that defeats MFA without touching your password.
Read more →
Three threat intelligence stories that matter to UK small businesses right now. Update your Apple devices. Check your router. And understand why APT29 is your problem too.
Read more →
Three threats converging today: a patched WordPress flaw now actively exploited, APT29 zero-click mobile attacks, and a cascade of AI developer platform compromises that every business using AI tools needs to understand.
Read more →
Attackers are inside WordPress sites right now. CISA confirmed it. If your business runs WordPress and you haven't patched, you're already in trouble.
Read more →
The NCSC says AI-assisted attacks on UK critical infrastructure are coming by 2028. The Node-RED ICS exploit is already here. Two stories, one message.
Read more →
A perfect 10.0 CVSS router flaw and a WordPress plugin vulnerability that hands attackers your entire server. Both published this week. Both fixable today.
Read more →
Ivanti zero-days chained in the wild since October. FortiMail unauthenticated file write being actively exploited. Over 1,000 GitLab servers still unpatched and under attack. This is not a quiet Monday.
Read more →