684 articles · Page 4 of 35
Three active threat campaigns UK SMBs cannot ignore today: TeamCity under ransomware fire, Roundcube being exploited in the wild, and ClickFix spreading through fake CAPTCHAs.
Read more →
Chrome has four V8 vulnerabilities under active exploitation. A new Android banking trojan is targeting Western European banks. And the ClickFix technique is still running campaigns through bulletproof hosting. Here is what matters.
Read more →
Two actively exploited vulnerabilities landed this week. One targets enterprise firewalls. The other is sitting on your website. Neither is theoretical.
Read more →
INC ransomware, an autonomous AI-driven implant, and an unpatched D-Link zero-day. Today's brief covers the three threats that actually matter this Tuesday.
Read more →
Zyxel and Gigatech vulnerabilities are actively exploited. Take immediate action to safeguard your business.
Read more →
Five perfect-score vulnerabilities in common small business routers. No authentication required. Exploits already public. What are you waiting for?
Read more →
UK SMBs should be aware of North Korea's Lazarus campaigns and supply chain vulnerabilities.
Read more →
Cisco's identity security product has a maximum-severity zero-day being exploited in the wild. If your network uses Cisco kit, this is not a drill.
Read more →
Two high-impact campaigns landed this week. One hit 100,000 sites through a trusted marketing platform. The other is Clop, back with a purpose-built data theft implant.
Read more →
A perfect-10 Cisco zero-day is being actively exploited. Simultaneously, GhostCode is stealing Microsoft 365 credentials through business contact forms. Both land on UK SMBs today.
Read more →
Three actively exploited vulnerabilities landed on CISA's KEV list overnight. One targets the backup software your MSP almost certainly uses.
Read more →
A CISA-confirmed remote access exploit and a sophisticated OAuth phishing kit are both in active use. Here is what to do before the end of the day.
Read more →
Russian state hackers are chaining Cisco email gateway flaws to plant persistent malware. Your D-Link router may have a CVSS 9.9 vulnerability with a public exploit. Both need attention today.
Read more →
Google Tag Manager abused to steal payment data from UK Magento sites. Two new IoT botnets scanning for unpatched edge devices. Today's brief covers both.
Read more →
A fintech breach via impersonation and an actively exploited GitLab flaw. Both are problems your business could be facing right now.
Read more →
CISA's KEV list grew by six this week. Two of the entries sit in technology that UK small businesses use every single day.
Read more →
APT29 weaponising hotel Wi-Fi. AI-assisted attackers compromising 440 PaperCut servers in hours. Today's briefing covers two campaigns UK SMBs cannot afford to ignore.
Read more →
A Russian-speaking attacker used hundreds of AI agents to compromise 440 servers in 48 hours. Your router might be next. Here is what to do today.
Read more →
Two confirmed active exploitation events, one patched months ago and still being hit. If you run WatchGuard or Chrome, read this before you do anything else today.
Read more →
Citrix/NetScaler and Google Chrome face active exploits targeting authentication bypass and arbitrary code execution.
Read more →