668 articles · Page 6 of 34
The NCSC is warning about internet-exposed systems again. Manchester Airports Group has lost 8.7 million customer records. And Teams vishing is now a structured initial access business.
Read more →
Saying you have MFA isn't evidence. Here's exactly what to collect so you can actually prove your controls work.
Read more →
CVSS 10.0. No user interaction required. Adobe Campaign Classic is being ripped apart this week, and WordPress sites are under active attack.
Read more →
The NCSC dealt with 204 nationally significant attacks last year. Richard Horne says the rate hasn't slowed down.
Read more →
Ubiquiti and Gitea vulnerabilities confirmed exploitable today. If your network runs UniFi or self-hosted Git, this is not one to park for next week.
Read more →
CVSS 9.8. Pre-authentication. Remote code execution as root. Your network hardware is the problem this week, and the data is brutal.
Read more →
24% of UK businesses have all five Cyber Essentials controls. Only 5% hold the certificate. Here's why that gap matters.
Read more →
Three active threats converging today: ClickFix malware delivery, a Check Point firewall bypass being exploited in the wild, and a Zimbra RCE campaign that has already claimed 270 servers.
Read more →
You say you're secure. Compliance asks you to prove it. Here's what happens when UK businesses actually try.
Read more →
Four CVSS 9.8 vulnerabilities landed this week in libraries your web tools probably use. Corrine breaks down what the intelligence says and what to do by Friday.
Read more →
Two actively exploited vulnerabilities and a sophisticated vishing campaign targeting Microsoft 365. Today's briefing covers what the advisories are not telling you.
Read more →
94% of UK business leaders feel confident. Only 5% hold Cyber Essentials. This week, we ask everyone to prove it.
Read more →
A Teams-based phishing loader and a coordinated Rust supply chain attack are active today. Both have direct exposure paths for UK small businesses.
Read more →
TrueConf is being actively exploited right now. Microsoft dropped four CVSS 10.0 flaws in Azure and Exchange. Your business needs to act today, not next week.
Read more →
Three distinct threats landed today. One is CISA-confirmed actively exploited. One is knocking on Europe's door via Android. None of them care how small your business is.
Read more →
Your MSP uses software that can control every machine you own. This week, attackers proved they know it too.
Read more →
Three threats converging today: a CISA-confirmed Windows RCE being exploited right now, Clop back with purpose-built data-theft tooling, and a phishing-as-a-service platform with over 4,000 confirmed victims.
Read more →
Three actively exploited vulnerabilities landed on CISA's confirmed list overnight. Here is what they mean for your business and what to do before Friday.
Read more →
CISA has confirmed ransomware gangs are exploiting a Windows Task Host flaw. Separately, Microsoft Copilot has a command injection vulnerability that can leak your data. Both affect UK SMBs today.
Read more →
600,000 WordPress sites are vulnerable to unauthenticated remote code execution. A new botnet is turning unpatched routers into criminal infrastructure. This week's brief.
Read more →