Your Router Is the Open Door: WAVLINK Zero-Days and Ivanti Exploits Hitting SMBs Right Now
More than 20 CVSS 10.0 vulnerabilities dropped overnight, most of them targeting the cheap routers sitting in UK small business offices right now.
Read more →All Articles
719 articles · Page 2 of 36
Threat Analysis: GitLab RCE and Drupal Commerce Under Active Exploit, Plus the Supply Chain Risks Your Dev Team Is Missing
CISA has added a max-severity GitLab vulnerability to its exploited catalogue. Drupal Commerce is also being actively attacked. Here is what that means if you run either platform.
Read more →
Firewall Down, CI/CD Cracked: The Two Vulnerabilities UK Small Businesses Need to Patch Right Now
Two actively exploited vulnerabilities confirmed yesterday. One can take your firewall offline. The other lets attackers own your development pipeline without a password.
Read more →
Threat Analysis: PHP2Shell Exploit Chain, Cisco ASA Zero-Day, and the Vishing Wave Hitting UK Businesses
Three threats converging today. PHP2Shell exploit chains confirmed in the wild, a Cisco firewall zero-day crashing SSL VPNs, and Q3 incident data showing vishing against IT helpdesks is on the rise.
Read more →
WordPress Under Active Attack and a Linux Kernel Flaw That Lets Attackers Plant Webshells: What UK Small Businesses Need to Know Today
Unauthenticated attackers can take over your WordPress site right now. Plus: a Linux kernel flaw confirmed as actively exploited. Here is what to do.
Read more →
Threat Analysis: Node2Shell Actively Exploited, 123 Reg China-Nexus Breach, and Microsoft Teams as an Attack Vector
Three threats landing today that UK SMBs cannot afford to ignore: a CISA-confirmed critical Brotli exploit, a breach of a major UK domain registrar, and Teams being weaponised for social engineering at scale.
Read more →
Adobe Under Active Attack, Microsoft Authenticator Fixed: UK SMB Cyber Brief 28th October 2026
Adobe's e-commerce platform is being actively exploited right now. If you run Magento or Adobe Commerce, this is not a drill.
Read more →
Threat Analysis: PHP2Shell KEV Confirmation and Microsoft Teams Social Engineering, What UK SMBs Need to Know
Two threats are running hot today: PHP2Shell is now CISA KEV-confirmed and linked to Lazarus Group, and Microsoft Teams external chat is being weaponised at scale. Here is what that means for your business.
Read more →
PHP Under Active Attack and 953 Online Shops Compromised: What UK Small Businesses Need to Know Now
Attackers are exploiting PHP in the wild today. 953 online stores are quietly stealing your customers' card details. Both problems are fixable this week.
Read more →
Threat Analysis: PHP2Shell RCE Exploited in the Wild, North Korea Linked, What UK SMBs Need to Know
PHP2Shell is being exploited right now. Three quarters of the web runs PHP. If you have a website, this is your problem.
Read more →
AI Is Now Running the Cyberattack: What This Week's PHP2Shell Breach Means for UK Small Business
Attackers are now using AI agents to run their post-breach operations. This week's intelligence explains what that means for your business.
Read more →
Threat Analysis: RemControl Android Banking Trojan, LiteLLM Supply Chain Compromise, and BlackX UEFI Bootkit
A banking trojan, a supply chain hit on AI tooling, and a bootkit that kills your AV before you know it's there. Here is what matters today.
Read more →
Threat Analysis: PHP2Shell Zero-Day Exploitation and Chinese APT ConnectWise Supply Chain Attack
Attackers were inside PHP servers before the patch existed. And if your IT provider uses ConnectWise, read the ConnectWise section carefully.
Read more →
PHP2Shell: The Critical Vulnerability Your Website Can't Afford to Ignore
PHP2Shell is live, exploits are circulating, and your website might already be a target. Here is the data, stripped of vendor noise.
Read more →
Threat Analysis: Critical PHP Vulnerabilities and the Wazza M365 Phishing Kit, What UK SMBs Need to Know Today
The NCSC published an urgent PHP alert today. PoC exploits are already circulating before the patch dropped. If you run a website, this is your first call of the day.
Read more →
Plex is Being Actively Exploited Right Now. Is Your Media Server a Backdoor Into Your Business?
Plex is a media server. It is also, right now, an actively exploited attack vector. CISA confirmed four vulnerabilities yesterday. Here is what you need to know.
Read more →
Threat Analysis: AOMEI Supply Chain Compromise, NetScaler RCE, and the ICO's Welsh Wake-Up Call
Three stories today that UK SMBs cannot afford to file away. One is a supply chain attack on software you probably have installed. One is a CVSS 9.8 RCE that is already being exploited in the wild. One is a cautionary tale from Wales that has your name on it.
Read more →
Your WordPress Site Is Compromised and Your Router Is Next: What UK Small Businesses Must Do This Week
Two stories this week. One hits your website. One hits your network. Both are being actively exploited right now. Here is what to do.
Read more →
Threat Analysis: ConnectWise Supply-Chain Breach Hits M365 Tenants, Plus Critical NetScaler RCE Under Active Exploitation
Vendor credentials used as master keys into client environments. NetScaler RCE actively exploited in the wild. Two stories, one lesson.
Read more →
Hardcoded Passwords and Hijacked Websites: What UK Small Businesses Need to Know This Week
A hardcoded admin token with a CVSS score of 9.8 and two critical Drupal vulnerabilities. This week's threats are not theoretical. Here is what to do right now.
Read more →