Meet Fred: The Man Who Worked in Accounts, Conveyancing, Reception and Management at Once
Five people were logging in as one person called Fred. This is what that actually costs a business when something goes wrong.
Read more →All Articles
684 articles · Page 6 of 35
Threat Analysis: NCSC Edge Device Alert, Manchester Airports Breach, and Microsoft Teams Vishing, What UK SMBs Need to Know
The NCSC is warning about internet-exposed systems again. Manchester Airports Group has lost 8.7 million customer records. And Teams vishing is now a structured initial access business.
Read more →
How to Build an Evidence Pack That Actually Proves Your Security Works
Saying you have MFA isn't evidence. Here's exactly what to collect so you can actually prove your controls work.
Read more →
Adobe Campaign Classic Is on Fire, WordPress Logins Are Being Bypassed, and Your Patch Queue Just Got Longer
CVSS 10.0. No user interaction required. Adobe Campaign Classic is being ripped apart this week, and WordPress sites are under active attack.
Read more →
Hello, Mauven Here. The NCSC Just Confirmed the Attacks Aren't Slowing Down
The NCSC dealt with 204 nationally significant attacks last year. Richard Horne says the rate hasn't slowed down.
Read more →
Threat Analysis: Ubiquiti Max-Severity Flaws, Gitea Actively Exploited, and the Trusted Infrastructure Problem
Ubiquiti and Gitea vulnerabilities confirmed exploitable today. If your network runs UniFi or self-hosted Git, this is not one to park for next week.
Read more →
Your Router Is a Loaded Gun: The CVEs That Should Worry Every UK Small Business This Week
CVSS 9.8. Pre-authentication. Remote code execution as root. Your network hardware is the problem this week, and the data is brutal.
Read more →
The Cyber Security Breaches Survey 2025/2026, Read Properly
24% of UK businesses have all five Cyber Essentials controls. Only 5% hold the certificate. Here's why that gap matters.
Read more →
Threat Analysis: ClickFix Campaigns, Check Point Authentication Bypass, and Zimbra RCE, What UK SMBs Need to Know
Three active threats converging today: ClickFix malware delivery, a Check Point firewall bypass being exploited in the wild, and a Zimbra RCE campaign that has already claimed 270 servers.
Read more →
Prove It: Why 94% Confidence and 5% Certification Cannot Both Be Right
You say you're secure. Compliance asks you to prove it. Here's what happens when UK businesses actually try.
Read more →
Podcast Brief: The HTML Sanitiser Flaws Your Web Tools Are Hiding From You
Four CVSS 9.8 vulnerabilities landed this week in libraries your web tools probably use. Corrine breaks down what the intelligence says and what to do by Friday.
Read more →
Threat Analysis: Zimbra Zero-Click RCE, Check Point Authentication Bypass, and the Helix Vishing Threat to UK SMBs
Two actively exploited vulnerabilities and a sophisticated vishing campaign targeting Microsoft 365. Today's briefing covers what the advisories are not telling you.
Read more →
Compliance Theatre vs Real Security: This Week We Ask You to Prove It
94% of UK business leaders feel confident. Only 5% hold Cyber Essentials. This week, we ask everyone to prove it.
Read more →
Threat Analysis: SynkLoader Teams Phishing and Rust Supply Chain Attacks, What UK SMBs Need to Know
A Teams-based phishing loader and a coordinated Rust supply chain attack are active today. Both have direct exposure paths for UK small businesses.
Read more →
TrueConf, Microsoft, and Elementor: What This Week's Vulnerabilities Mean for Your Business
TrueConf is being actively exploited right now. Microsoft dropped four CVSS 10.0 flaws in Azure and Exchange. Your business needs to act today, not next week.
Read more →
Threat Analysis: Citrix NetScaler Flaws, MLflow Exploitation, and the Manic Android Malware Targeting Europe
Three distinct threats landed today. One is CISA-confirmed actively exploited. One is knocking on Europe's door via Android. None of them care how small your business is.
Read more →
Your MSP's Remote Management Tool Just Became a Master Key for Attackers
Your MSP uses software that can control every machine you own. This week, attackers proved they know it too.
Read more →
Threat Analysis: Windows IKE RCE Under Active Exploitation, Clop Returns with Custom Implant, and Mirage2FA Phishing-as-a-Service Scales
Three threats converging today: a CISA-confirmed Windows RCE being exploited right now, Clop back with purpose-built data-theft tooling, and a phishing-as-a-service platform with over 4,000 confirmed victims.
Read more →
Microsoft SharePoint, Apple Screen Sharing, and Copilot's Data Leak Problem: The 19 August 2026 Threat Brief
Three actively exploited vulnerabilities landed on CISA's confirmed list overnight. Here is what they mean for your business and what to do before Friday.
Read more →
Threat Analysis: Windows Task Host Ransomware Exploitation and Microsoft Copilot Command Injection, What UK SMBs Need to Know
CISA has confirmed ransomware gangs are exploiting a Windows Task Host flaw. Separately, Microsoft Copilot has a command injection vulnerability that can leak your data. Both affect UK SMBs today.
Read more →