What the Data Brokers Know About You: A UK Director Investigation
What do UK data brokers actually hold on a small business director? Lucy Harper investigates using public records, enforcement history, and ICO documentation.
Read more →All Articles
684 articles · Page 10 of 35
Threat Analysis: CitrixBleed 2 Ransomware Chain, SilabRAT MaaS, and the NHS Email Incident That Should Not Have Happened
Three stories today that together explain exactly how UK SMBs get compromised in 2026. One is a patched vulnerability nobody patched. One is a £3,900-a-month RAT. One is a CC field.
Read more →
Your Security Tool Has a Hole in It: The Hermes WebUI RCE and the Windows Defender Patch That Breaks Things
Two critical vulnerabilities this week prove that your security tools are now the target. Here is the plain-English briefing.
Read more →
How to Audit Your Own OSINT Exposure: A Step-by-Step Guide for UK Directors
A practical sequenced guide to audit and reduce your public data exposure as a UK SMB director. No tools required. No budget needed. One afternoon.
Read more →
Threat Analysis: Microsoft Defender Zero-Day Patched, Vidar Infostealer Surge, and What the NCSC's New Cyber Essentials Pathway Actually Means
A Defender zero-day with public exploit code, a Vidar infostealer surge hitting developer toolchains, and a quiet but significant change to Cyber Essentials Plus certification.
Read more →
Threat Analysis: Ubiquiti UniFi Critical Flaws and Adobe ColdFusion Under Active Exploitation, What UK SMBs Need to Know
Two max-severity vulnerabilities are being actively exploited right now. If your office runs Ubiquiti kit or any ColdFusion-backed web infrastructure, read this first.
Read more →
Threat Analysis: Microsoft Teams Helpdesk Scams, Multi-Stage Phishing RATs, and the UK Cyber Pledge Nobody Asked About
Fake IT support on Teams. Steganographic RAT delivery via phishing. And Capita signed a government cyber pledge. It has been that kind of day.
Read more →
Adobe ColdFusion Is Being Actively Exploited Right Now. And Your MSP's Remote Access Tool Might Be Next.
A perfect-10 Adobe flaw exploited within two hours. Hundreds of unpatched RMM servers still exposed. Two stories your IT provider needs to hear today.
Read more →
Threat Analysis: Adobe ColdFusion CVE-2026-48282 and the Fake Helpdesk Wave Hitting UK Businesses
CVE-2026-48282 is being exploited in the wild. Meanwhile, a criminal group called Pink is ringing your staff and talking their way past MFA. Here is what both mean for your business.
Read more →
Threat Analysis: ARToken M365 Phishing Platform, Avalon Ransomware Framework, and a 2-Million-Device Botnet, What UK SMBs Need to Know
Three active campaigns with direct UK SMB exposure: a sophisticated M365 phishing platform, a legal-lure ransomware framework, and a residential proxy botnet the FBI just cracked open.
Read more →
SharePoint Is Being Actively Exploited Right Now. Is Yours Patched?
A SharePoint vulnerability is being actively exploited right now. CISA confirmed it. Microsoft sat on the disclosure for weeks. Here is what you need to know.
Read more →
The ICO Is Not Hunting Your Business
The ICO is not hiding in a hedge outside your office. The real danger is inside your business: missing breach processes and data nobody can account for.
Read more →
SharePoint Is Being Actively Exploited Right Now: What UK Small Businesses Need to Know
SharePoint has a confirmed, actively-exploited code execution flaw. CISA added it to the KEV list yesterday. If your business uses SharePoint, read this now.
Read more →
Your MSP's Remote Support Tool Is Being Used Against You Right Now
A maximum-severity flaw in SimpleHelp RMM is being actively exploited. Attackers are walking straight through your MSP's front door. Here is what that means for your business.
Read more →
Threat Analysis: The Gentlemen Ransomware and ARToken Phishing Platform, What UK SMBs Need to Know
Two threats. One kills your endpoint security before you know it's there. The other hands your Microsoft 365 to criminals on a subscription basis.
Read more →
Threat Analysis: BlueHammer Ransomware Escalation and SimpleHelp RMM Exploitation, What UK SMBs Need to Know
Ransomware gangs are now exploiting a Windows Defender privilege escalation flaw confirmed by CISA. If your MSP uses SimpleHelp, you have a second problem to deal with today.
Read more →
Hello, Mauven Here: The UK Data Broker Market Just Got a Legal Upgrade It Did Not Deserve
The Data Use and Access Act 2025 clarifies that direct marketing can be a legitimate interest. The data broker industry is delighted. You should pay attention.
Read more →
Your IT Support Tool Has a Master Key. Someone Just Found It.
The remote support tool your IT provider uses to fix your computers has a flaw that lets attackers walk straight in. No password required.
Read more →
Threat Analysis: Oracle EBS Under Active Exploitation and the DriveSurge Drive-By Campaign, What UK SMBs Need to Know
Oracle's E-Business Suite is being actively exploited right now. And a new initial access broker is turning legitimate websites into malware delivery points.
Read more →
The UK's Open Book: How Public Data Turns Directors Into Targets
Companies House, the open electoral register, and LinkedIn combine into a director profile any attacker can build in under 20 minutes. Here is the full picture.
Read more →