684 articles · Page 2 of 35
Three threats landing today that UK SMBs cannot afford to ignore: a CISA-confirmed critical Brotli exploit, a breach of a major UK domain registrar, and Teams being weaponised for social engineering at scale.
Read more →
Adobe's e-commerce platform is being actively exploited right now. If you run Magento or Adobe Commerce, this is not a drill.
Read more →
Two threats are running hot today: PHP2Shell is now CISA KEV-confirmed and linked to Lazarus Group, and Microsoft Teams external chat is being weaponised at scale. Here is what that means for your business.
Read more →
Attackers are exploiting PHP in the wild today. 953 online stores are quietly stealing your customers' card details. Both problems are fixable this week.
Read more →
PHP2Shell is being exploited right now. Three quarters of the web runs PHP. If you have a website, this is your problem.
Read more →
Attackers are now using AI agents to run their post-breach operations. This week's intelligence explains what that means for your business.
Read more →
A banking trojan, a supply chain hit on AI tooling, and a bootkit that kills your AV before you know it's there. Here is what matters today.
Read more →
Attackers were inside PHP servers before the patch existed. And if your IT provider uses ConnectWise, read the ConnectWise section carefully.
Read more →
PHP2Shell is live, exploits are circulating, and your website might already be a target. Here is the data, stripped of vendor noise.
Read more →
The NCSC published an urgent PHP alert today. PoC exploits are already circulating before the patch dropped. If you run a website, this is your first call of the day.
Read more →
Plex is a media server. It is also, right now, an actively exploited attack vector. CISA confirmed four vulnerabilities yesterday. Here is what you need to know.
Read more →
Three stories today that UK SMBs cannot afford to file away. One is a supply chain attack on software you probably have installed. One is a CVSS 9.8 RCE that is already being exploited in the wild. One is a cautionary tale from Wales that has your name on it.
Read more →
Vendor credentials used as master keys into client environments. NetScaler RCE actively exploited in the wild. Two stories, one lesson.
Read more →
A hardcoded admin token with a CVSS score of 9.8 and two critical Drupal vulnerabilities. This week's threats are not theoretical. Here is what to do right now.
Read more →
Three threats converge today: a confirmed zero-day in BeyondTrust remote support tools, AI-orchestrated exploitation of PaperCut print management software, and a ransomware cartel with growing UK exposure.
Read more →
Active exploitation confirmed. Eight Atlassian products compromised. Your IP cameras may be next. This week's threats, stripped of the marketing noise.
Read more →
Three stories today that share a common thread: edge devices, legacy data, and the gap between what advisories say and what they mean for your organisation.
Read more →
CISA confirmed active exploitation of backup and email gateway vulnerabilities this week. If your MSP uses Ahsay CBS, the clock is already ticking.
Read more →
Law enforcement took down the CoGUI phishing empire today. Meanwhile, Ivanti Connect Secure is being actively exploited right now. Here is what both mean for your business.
Read more →
CISA confirmed active exploitation of two critical flaws on the 13th of October 2026. Here is the plain-English breakdown and your action list.
Read more →