582 articles · Page 3 of 30
570 Microsoft patches. A Windows zero-day PoC published hours later. A building automation protocol now on the CISA KEV list. This week is not one to ignore.
Read more →
Hello, Mauven here. The Upper Tribunal dismissed the ICO's Experian appeal in April 2024. Here is what the outcome signals about UK data broker regulation.
Read more →
Two Microsoft zero-days are being actively exploited right now. One requires no login whatsoever. Here is what to do before close of business.
Read more →
SonicWall zero-days are being exploited in the wild. Microsoft patched 570 flaws in one go. Here is what actually matters for your business this week.
Read more →
Three stories today that UK SMBs cannot afford to ignore: SharePoint flaws being actively exploited, a sophisticated AiTM phishing operation, and a poisoned npm supply chain.
Read more →
Your MFA is not the safety net you think it is. Two new phishing kits are bypassing it right now, and AI is doing the heavy lifting for attackers.
Read more →
Attackers are executing arbitrary code on Joomla websites right now. CISA confirmed it. Here is what UK small businesses need to do today.
Read more →
UK GDPR came into force in 2018. Seven years on the data broker market has grown and zero monetary penalties have been imposed on a UK data broker.
Read more →
The NCSC has joined a Nine-Eyes advisory on Russian state actors targeting poorly configured routers. Meanwhile, Progress ShareFile has ordered an emergency server shutdown over an undisclosed threat.
Read more →
UK GDPR gave individuals the right to erasure in 2018. The commercial data broker market has grown every year since. This is not a coincidence.
Read more →
Next week Mauven MacLeod joins to break down the social engineering chain. How attackers turn a public profile into a targeted attack before sending anything.
Read more →
UK GDPR promised control. Seven years on the ICO has not imposed a monetary penalty on a UK data broker. Lucy Harper joins me today.
Read more →
Companies House is a mandatory, public, searchable director database that attackers use daily. The government built it, mandates it, and shrugs at what follows.
Read more →
What do UK data brokers actually hold on a small business director? Lucy Harper investigates using public records, enforcement history, and ICO documentation.
Read more →
Three stories today that together explain exactly how UK SMBs get compromised in 2026. One is a patched vulnerability nobody patched. One is a £3,900-a-month RAT. One is a CC field.
Read more →
Two critical vulnerabilities this week prove that your security tools are now the target. Here is the plain-English briefing.
Read more →
A practical sequenced guide to audit and reduce your public data exposure as a UK SMB director. No tools required. No budget needed. One afternoon.
Read more →
A Defender zero-day with public exploit code, a Vidar infostealer surge hitting developer toolchains, and a quiet but significant change to Cyber Essentials Plus certification.
Read more →
CVSS 9.8. No authentication required. A WordPress plugin flaw published yesterday lets attackers run arbitrary code on your server. Here is what it means.
Read more →
Two max-severity vulnerabilities are being actively exploited right now. If your office runs Ubiquiti kit or any ColdFusion-backed web infrastructure, read this first.
Read more →