Compliance Week Done: What to Action This Weekend Before the GRC Finale
Compliance week is done. Here's what to action this weekend, and what's coming when we wrap the whole GRC series.
Read more →All Articles
650 articles · Page 3 of 33
Threat Analysis: PaperCut Zero-Day, Microsoft Teams Vishing, and the Supply Chain You Forgot to Audit
Three threats, no comfortable answers. PaperCut is being exploited right now, your helpdesk impersonators have a new backdoor, and your office router may already be compromised.
Read more →
ownCloud Left the Door Open: Three Active Exploits UK Small Businesses Need to Know About Now
Three vulnerabilities confirmed actively exploited in 48 hours. One lets attackers read, modify, or delete any file without a password. The data speaks for itself.
Read more →
Threat Analysis: NCSC Edge Device Alert, Manchester Airports Breach, and Microsoft Teams Vishing, What UK SMBs Need to Know
The NCSC is warning about internet-exposed systems again. Manchester Airports Group has lost 8.7 million customer records. And Teams vishing is now a structured initial access business.
Read more →
WordPress Sites, SQL Server, and Your Web Stack: The Patch Queue That Can't Wait
Active exploitation confirmed. Microsoft SQL Server, WordPress Avada, and Gitea are all under attack right now. Here is what UK small businesses need to do before Friday.
Read more →
Adobe Campaign Classic Is on Fire, WordPress Logins Are Being Bypassed, and Your Patch Queue Just Got Longer
CVSS 10.0. No user interaction required. Adobe Campaign Classic is being ripped apart this week, and WordPress sites are under active attack.
Read more →
Hello, Mauven Here. The NCSC Just Confirmed the Attacks Aren't Slowing Down
The NCSC dealt with 204 nationally significant attacks last year. Richard Horne says the rate hasn't slowed down.
Read more →
Threat Analysis: Ubiquiti Max-Severity Flaws, Gitea Actively Exploited, and the Trusted Infrastructure Problem
Ubiquiti and Gitea vulnerabilities confirmed exploitable today. If your network runs UniFi or self-hosted Git, this is not one to park for next week.
Read more →
Your Router Is a Loaded Gun: The CVEs That Should Worry Every UK Small Business This Week
CVSS 9.8. Pre-authentication. Remote code execution as root. Your network hardware is the problem this week, and the data is brutal.
Read more →
The Cyber Security Breaches Survey 2025/2026, Read Properly
24% of UK businesses have all five Cyber Essentials controls. Only 5% hold the certificate. Here's why that gap matters.
Read more →
Threat Analysis: ClickFix Campaigns, Check Point Authentication Bypass, and Zimbra RCE, What UK SMBs Need to Know
Three active threats converging today: ClickFix malware delivery, a Check Point firewall bypass being exploited in the wild, and a Zimbra RCE campaign that has already claimed 270 servers.
Read more →
Podcast Brief: The HTML Sanitiser Flaws Your Web Tools Are Hiding From You
Four CVSS 9.8 vulnerabilities landed this week in libraries your web tools probably use. Corrine breaks down what the intelligence says and what to do by Friday.
Read more →
Threat Analysis: Zimbra Zero-Click RCE, Check Point Authentication Bypass, and the Helix Vishing Threat to UK SMBs
Two actively exploited vulnerabilities and a sophisticated vishing campaign targeting Microsoft 365. Today's briefing covers what the advisories are not telling you.
Read more →
Threat Analysis: SynkLoader Teams Phishing and Rust Supply Chain Attacks, What UK SMBs Need to Know
A Teams-based phishing loader and a coordinated Rust supply chain attack are active today. Both have direct exposure paths for UK small businesses.
Read more →
TrueConf, Microsoft, and Elementor: What This Week's Vulnerabilities Mean for Your Business
TrueConf is being actively exploited right now. Microsoft dropped four CVSS 10.0 flaws in Azure and Exchange. Your business needs to act today, not next week.
Read more →
Threat Analysis: Citrix NetScaler Flaws, MLflow Exploitation, and the Manic Android Malware Targeting Europe
Three distinct threats landed today. One is CISA-confirmed actively exploited. One is knocking on Europe's door via Android. None of them care how small your business is.
Read more →
Your MSP's Remote Management Tool Just Became a Master Key for Attackers
Your MSP uses software that can control every machine you own. This week, attackers proved they know it too.
Read more →
Threat Analysis: Windows IKE RCE Under Active Exploitation, Clop Returns with Custom Implant, and Mirage2FA Phishing-as-a-Service Scales
Three threats converging today: a CISA-confirmed Windows RCE being exploited right now, Clop back with purpose-built data-theft tooling, and a phishing-as-a-service platform with over 4,000 confirmed victims.
Read more →
Microsoft SharePoint, Apple Screen Sharing, and Copilot's Data Leak Problem: The 19 August 2026 Threat Brief
Three actively exploited vulnerabilities landed on CISA's confirmed list overnight. Here is what they mean for your business and what to do before Friday.
Read more →
Threat Analysis: Windows Task Host Ransomware Exploitation and Microsoft Copilot Command Injection, What UK SMBs Need to Know
CISA has confirmed ransomware gangs are exploiting a Windows Task Host flaw. Separately, Microsoft Copilot has a command injection vulnerability that can leak your data. Both affect UK SMBs today.
Read more →