The Cyber Security Breaches Survey 2025/2026, Read Properly
24% of UK businesses have all five Cyber Essentials controls. Only 5% hold the certificate. Here's why that gap matters.
Read more →All Articles
661 articles · Page 4 of 34
Threat Analysis: ClickFix Campaigns, Check Point Authentication Bypass, and Zimbra RCE, What UK SMBs Need to Know
Three active threats converging today: ClickFix malware delivery, a Check Point firewall bypass being exploited in the wild, and a Zimbra RCE campaign that has already claimed 270 servers.
Read more →
Podcast Brief: The HTML Sanitiser Flaws Your Web Tools Are Hiding From You
Four CVSS 9.8 vulnerabilities landed this week in libraries your web tools probably use. Corrine breaks down what the intelligence says and what to do by Friday.
Read more →
Threat Analysis: Zimbra Zero-Click RCE, Check Point Authentication Bypass, and the Helix Vishing Threat to UK SMBs
Two actively exploited vulnerabilities and a sophisticated vishing campaign targeting Microsoft 365. Today's briefing covers what the advisories are not telling you.
Read more →
Threat Analysis: SynkLoader Teams Phishing and Rust Supply Chain Attacks, What UK SMBs Need to Know
A Teams-based phishing loader and a coordinated Rust supply chain attack are active today. Both have direct exposure paths for UK small businesses.
Read more →
TrueConf, Microsoft, and Elementor: What This Week's Vulnerabilities Mean for Your Business
TrueConf is being actively exploited right now. Microsoft dropped four CVSS 10.0 flaws in Azure and Exchange. Your business needs to act today, not next week.
Read more →
Threat Analysis: Citrix NetScaler Flaws, MLflow Exploitation, and the Manic Android Malware Targeting Europe
Three distinct threats landed today. One is CISA-confirmed actively exploited. One is knocking on Europe's door via Android. None of them care how small your business is.
Read more →
Your MSP's Remote Management Tool Just Became a Master Key for Attackers
Your MSP uses software that can control every machine you own. This week, attackers proved they know it too.
Read more →
Threat Analysis: Windows IKE RCE Under Active Exploitation, Clop Returns with Custom Implant, and Mirage2FA Phishing-as-a-Service Scales
Three threats converging today: a CISA-confirmed Windows RCE being exploited right now, Clop back with purpose-built data-theft tooling, and a phishing-as-a-service platform with over 4,000 confirmed victims.
Read more →
Microsoft SharePoint, Apple Screen Sharing, and Copilot's Data Leak Problem: The 19 August 2026 Threat Brief
Three actively exploited vulnerabilities landed on CISA's confirmed list overnight. Here is what they mean for your business and what to do before Friday.
Read more →
Threat Analysis: Windows Task Host Ransomware Exploitation and Microsoft Copilot Command Injection, What UK SMBs Need to Know
CISA has confirmed ransomware gangs are exploiting a Windows Task Host flaw. Separately, Microsoft Copilot has a command injection vulnerability that can leak your data. Both affect UK SMBs today.
Read more →
Your WordPress Site Has a Hole in It. So Does Your Router. Here's What's Happening This Week.
600,000 WordPress sites are vulnerable to unauthenticated remote code execution. A new botnet is turning unpatched routers into criminal infrastructure. This week's brief.
Read more →
Your Router Is the Front Door: Three Vulnerabilities That Should Worry Every UK Small Business
Publicly available exploits, unpatched routers, and WordPress plugins with nine-point-nine CVSS scores. This week's threat brief is not comfortable reading.
Read more →
Threat Analysis: Clop's Managed File Transfer Playbook, ShinyHunters' SaaS Pivot, and a Maximum-Severity SAP Flaw Under Active Attack
Three separate threat streams converging today, and UK SMBs sit in the blast radius of all of them.
Read more →
Poisoned Plugins, Hijacked SharePoint, and a WordPress Patch You Cannot Ignore: UK SMB Threat Brief, 14 August 2026
Two stories this week that should make any UK small business owner sit up. One targets your website. The other targets your office collaboration tools.
Read more →
You Cannot Protect Against Everything: Week Two of Our GRC Series Starts Now
Nobody can protect against everything. This week: how to work out what actually deserves your attention.
Read more →
This Week: Governance Sorted. Next Week: The Stuff That Could Actually Sink You
Governance done. Next week we work out what's actually worth losing sleep over, and what genuinely isn't.
Read more →
612,000 Breached Businesses and Nobody's Talking About the Real Reason Why
612,000 businesses breached, and the industry conversation still fixates on the wrong villain.
Read more →
How to Write Your One-Page Governance Sheet This Afternoon
Four headings, forty-five minutes, one sheet of paper. Here's exactly how to build it.
Read more →
Cyber Essentials Just Got Its Teeth: What the Danzell Update Actually Changes
Hello, Mauven here. Cyber Essentials stopped taking your word for it on MFA. About time.
Read more →