649 articles · Page 14 of 33
A critical cPanel authentication bypass has been exploited since February. A new Linux root exploit dropped today. And 43% of UK businesses were compromised last year. Pick your priority.
Read more →
The Pledge launches this summer. Certification takes four to six weeks. Here is the exact process, with costs, timelines, and the steps your IT provider should handle.
Read more →
This week's threat brief covers a critical cPanel auth bypass requiring emergency patching, ClickFix phishing campaigns stealing credentials via PowerShell, and VECT ransomware that wipes files it cannot encrypt.
Read more →
I was in the room when the Cyber Resilience Pledge was announced. The speeches were confident. The corridor conversations afterwards were not.
Read more →
Russian state hackers are in your Windows machine without a click. Five router flaws scored 9.8 overnight. This week's threat brief cuts through the noise.
Read more →
Three active campaigns converge on UK small businesses this week: voice-driven extortion, poisoned developer packages, and OAuth phishing that bypasses MFA. Here is what they are not telling you.
Read more →
NCSC's SilentGlass is technically sound government kit, now available commercially. But if you're still fighting phishing, it's probably not your next purchase.
Read more →
Nineteen critical flaws. One router model. All exploits published. If your office uses a Totolink A8000RU, you are already exposed.
Read more →
TeamPCP is back. Three concurrent package compromises in one week. Here is what UK businesses using Python or Node.js tooling need to do right now.
Read more →
Voice phishing plus credential harvesting. Malicious Python packages with 11 million monthly downloads. This is what active UK cyber threats look like today.
Read more →
The government pledged £90m for SMB cyber resilience. Sounds impressive until you do the maths. That is £5.35 per business per year. Here is what actually matters from CyberUK 2026.
Read more →
State-sponsored attackers are reaching small businesses through the systems they already rely on. Here is how to spot it and respond.
Read more →
CISA just added SimpleHelp remote support vulnerabilities to its actively-exploited list. If your IT provider uses it, attackers may already have a path in.
Read more →
A quiet day on the KEV and NVD feeds. Mauven explains why that is not the same as a safe day.
Read more →
Cyber Essentials v3.3 goes live tomorrow. MFA and patching become auto-fail questions. Cloud services cannot be scoped out. Buckle up.
Read more →
DNS is the messenger, not the murderer. The real problem is that most UK small businesses do not understand their own networks.
Read more →
Three weeks. Two resolver changes. One compromised router nobody checked. How a UK accountancy firm blamed DNS while the real threat hid.
Read more →
Website not loading? Before you blame DNS, follow these five steps. A practical guide that saves hours of wasted time.
Read more →
The NCSC has blocked 1.5 million malicious domains with Protective DNS. Private sector SMBs do not qualify. Here is what that gap means and how to close it.
Read more →
DNS security is not an enterprise problem. Cache poisoning and rogue resolvers are actively targeting small businesses right now.
Read more →