668 articles · Page 15 of 34
Signed packages, a six-minute supply chain blitz, and ransomware using blockchain to hide its C2. Today's brief covers two threats that reach well beyond enterprise targets.
Read more →
Three stories this week that every UK small business owner needs to hear. One phishing email. Twenty months undetected. One million pounds.
Read more →
Strip out Microsoft licensing. If your provider is below £50 per user per month outside London or £75 inside it, something has been removed. The maths does not lie.
Read more →
If your IT provider is thirty-five quid a head cheaper than the sensible option, you are not saving money. You are buying yourself a more dramatic disaster later.
Read more →
AI is now writing zero-day exploits. Cloud infrastructure is being weaponised against your staff. And TrickMo just made its banking trojan significantly harder to detect.
Read more →
DSIT publishes a misleading headline figure every April. They also publish a more honest cyber crime number in the same report. Guess which one the press, the vendors, and your MSP quote at you.
Read more →
31% of UK businesses are adopting AI. Only 24% have any security governance. Three quarters have hired an eager intern with zero discretion.
Read more →
APT28 is rewriting your router's DNS settings. Ivanti EPMM has a zero-day with active exploitation. And threat actors are abusing remote management tools to drop malware via phishing. Here is what UK SMBs need to know today.
Read more →
Attackers are inside Ivanti EPMM before patches existed. If your business manages mobile devices, this is not someone else's problem.
Read more →
6% of UK businesses review their wider supply chain for cyber risk. 94% are flying blind. The most dangerous number in the 2026 Breaches Survey.
Read more →
A critical Palo Alto firewall flaw is being actively exploited with no patch yet available. If your MSP manages a PAN-OS device, ask them one question.
Read more →
State-sponsored actors had a month inside Palo Alto firewalls before the advisory came out. Storm-1175 is still moving. And your developers may have already run the poisoned package.
Read more →
A single broken cryptographic signature took large parts of Germany's internet offline. Your business has the same invisible dependency.
Read more →
53% of UK businesses have no MFA. 56% have no continuity plan. Five steps to beat the average this week. No budget. No consultants. No excuses.
Read more →
Google Chrome has been quietly dropping a 4 GB AI model onto user machines. No clear prompt. No informed consent. Just a mystery file buried in a browser profile. This is not about AI being evil. This is about a vendor treating your disk space, your bandwidth, and your governance obligations as someone else's problem.
Read more →
A Palo Alto firewall zero-day is being actively exploited right now. And MuddyWater is using Microsoft Teams to walk through your front door. Both matter today.
Read more →
WordPress sites can be taken over without a password. A Linux root exploit is being actively weaponised. And a nation-state group is still walking through Exchange servers that weren't patched in 2021.
Read more →
Awareness went up. Risk assessments went down. Continuity plans dropped 9 points. If concern was a control, the survey numbers would look very different.
Read more →
A fake Teams installer is dropping backdoors globally. A third-party analytics vendor handed ShinyHunters 119,000 email addresses. And UK romance fraud hit £102M last year. Three stories, one briefing.
Read more →
Phishing caused 69% of the most disruptive breaches. 51% of victims were hit by phishing alone. The fight has moved from inboxes to identity controls.
Read more →