684 articles · Page 1 of 35
Two active campaigns are turning legitimate remote access tools against the businesses they're supposed to protect. Here is what that means for UK SMBs.
Read more →
Your MSP's remote monitoring platform may have been offline this week for a reason. Here is what happened, what it means, and what to do about it.
Read more →
Your MSP's remote management platform may be the door attackers walk through. Two stories today that every UK small business owner should hand to their IT provider.
Read more →
1,093 CVEs. One zero-day confirmed exploited. Four flaws that could destroy a small business network. Here is the patch order you actually need.
Read more →
Two actively exploited vulnerabilities confirmed this week. One targets Outlook, one targets Chrome. Both are on every UK small business machine right now.
Read more →
Attackers are actively exploiting Barracuda email gateways for root access. Chrome has its eighth zero-day this year. Turla is reading government email. Three things that need your attention today.
Read more →
33 critical vulnerabilities in a tool that sits inside your network with admin-level access. Your MSP's platform. This is not a drill.
Read more →
Three threats converge today: backup software being weaponised against MSP clients, hotel reservation phishing with surgical personalisation, and Microsoft bouncing legitimate email from domains with weak authentication.
Read more →
Three confirmed, actively exploited vulnerabilities. SonicWall VPNs, Apple devices, WordPress sites. If you use any of these, read this before Friday.
Read more →
APT29 is targeting mobile devices via compromised websites. Exposed refrigeration controllers are running spam infrastructure. And email-based phishing hit 7.3 billion detections in Q3 2026.
Read more →
A patch that doesn't patch. An Apple flaw being actively exploited. And ChatGPT quietly leaking your conversations. Here's what matters this week.
Read more →
Three threats with direct UK SMB exposure today: APT29 mobile watering holes, a patched Zyxel network switch zero-day, and a phishing kit that defeats MFA without touching your password.
Read more →
Three threat intelligence stories that matter to UK small businesses right now. Update your Apple devices. Check your router. And understand why APT29 is your problem too.
Read more →
Three threats converging today: a patched WordPress flaw now actively exploited, APT29 zero-click mobile attacks, and a cascade of AI developer platform compromises that every business using AI tools needs to understand.
Read more →
The NCSC says AI-assisted attacks on UK critical infrastructure are coming by 2028. The Node-RED ICS exploit is already here. Two stories, one message.
Read more →
Ivanti zero-days chained in the wild since October. FortiMail unauthenticated file write being actively exploited. Over 1,000 GitLab servers still unpatched and under attack. This is not a quiet Monday.
Read more →
More than 20 CVSS 10.0 vulnerabilities dropped overnight, most of them targeting the cheap routers sitting in UK small business offices right now.
Read more →
CISA has added a max-severity GitLab vulnerability to its exploited catalogue. Drupal Commerce is also being actively attacked. Here is what that means if you run either platform.
Read more →
Two actively exploited vulnerabilities confirmed yesterday. One can take your firewall offline. The other lets attackers own your development pipeline without a password.
Read more →
Three threats converging today. PHP2Shell exploit chains confirmed in the wild, a Cisco firewall zero-day crashing SSL VPNs, and Q3 incident data showing vishing against IT helpdesks is on the rise.
Read more →