663 articles · Page 2 of 34
Five perfect-score vulnerabilities in common small business routers. No authentication required. Exploits already public. What are you waiting for?
Read more →
UK SMBs should be aware of North Korea's Lazarus campaigns and supply chain vulnerabilities.
Read more →
Cisco's identity security product has a maximum-severity zero-day being exploited in the wild. If your network uses Cisco kit, this is not a drill.
Read more →
Two high-impact campaigns landed this week. One hit 100,000 sites through a trusted marketing platform. The other is Clop, back with a purpose-built data theft implant.
Read more →
A perfect-10 Cisco zero-day is being actively exploited. Simultaneously, GhostCode is stealing Microsoft 365 credentials through business contact forms. Both land on UK SMBs today.
Read more →
Three actively exploited vulnerabilities landed on CISA's KEV list overnight. One targets the backup software your MSP almost certainly uses.
Read more →
A CISA-confirmed remote access exploit and a sophisticated OAuth phishing kit are both in active use. Here is what to do before the end of the day.
Read more →
Attackers are already inside WooCommerce shops. One human operator hit an SSH bastion in eight seconds. Here is what that means for your business today.
Read more →
Russian state hackers are chaining Cisco email gateway flaws to plant persistent malware. Your D-Link router may have a CVSS 9.9 vulnerability with a public exploit. Both need attention today.
Read more →
Google Tag Manager abused to steal payment data from UK Magento sites. Two new IoT botnets scanning for unpatched edge devices. Today's brief covers both.
Read more →
A fintech breach via impersonation and an actively exploited GitLab flaw. Both are problems your business could be facing right now.
Read more →
CISA's KEV list grew by six this week. Two of the entries sit in technology that UK small businesses use every single day.
Read more →
APT29 weaponising hotel Wi-Fi. AI-assisted attackers compromising 440 PaperCut servers in hours. Today's briefing covers two campaigns UK SMBs cannot afford to ignore.
Read more →
A Russian-speaking attacker used hundreds of AI agents to compromise 440 servers in 48 hours. Your router might be next. Here is what to do today.
Read more →
Two confirmed active exploitation events, one patched months ago and still being hit. If you run WatchGuard or Chrome, read this before you do anything else today.
Read more →
Citrix/NetScaler and Google Chrome face active exploits targeting authentication bypass and arbitrary code execution.
Read more →
Unpatched Plex servers and active Windows exploits pose a serious risk to UK SMBs.
Read more →
Stay informed: critical vulnerabilities in Adobe and Microsoft require immediate attention.
Read more →
Urgent: New zero-days in Microsoft Defender and Chrome. Get protected today!
Read more →
CRITICAL CVEs in D-Link and Adobe systems are actively exploited. UK SMBs, are you patched?
Read more →