How to Submit a UK GDPR Erasure Request to a Data Broker That Actually Works
Most UK GDPR erasure requests to data brokers fail because they are vague, undocumented, or not followed up. Here is the process that produces results.
Read more →All Articles
663 articles · Page 7 of 34
Patch Tuesday Delivered 570 Fixes. A Zero-Day Arrived Hours Later. What UK Small Businesses Need to Do Right Now.
570 Microsoft patches. A Windows zero-day PoC published hours later. A building automation protocol now on the CISA KEV list. This week is not one to ignore.
Read more →
Hello, Mauven Here: Why the ICO's Experian Loss Matters More Than You Think
Hello, Mauven here. The Upper Tribunal dismissed the ICO's Experian appeal in April 2024. Here is what the outcome signals about UK data broker regulation.
Read more →
Microsoft's Record 622-Flaw Patch Tuesday and Two Active Zero-Days: What UK Small Businesses Must Do Today
Two Microsoft zero-days are being actively exploited right now. One requires no login whatsoever. Here is what to do before close of business.
Read more →
SonicWall Zero-Days, 570 Microsoft Patches, and Fake GitHub Repos: Your July 2026 Threat Briefing
SonicWall zero-days are being exploited in the wild. Microsoft patched 570 flaws in one go. Here is what actually matters for your business this week.
Read more →
Threat Analysis: SharePoint Under Active Attack, AiTM Phishing Surge, and npm Supply Chain Compromise
Three stories today that UK SMBs cannot afford to ignore: SharePoint flaws being actively exploited, a sophisticated AiTM phishing operation, and a poisoned npm supply chain.
Read more →
Threat Analysis: MFA-Bypassing Phishing Kits and AI-Accelerated Attack Infrastructure, What UK SMBs Need to Know
Your MFA is not the safety net you think it is. Two new phishing kits are bypassing it right now, and AI is doing the heavy lifting for attackers.
Read more →
Your Joomla Website Is Being Actively Exploited Right Now. What Are You Doing About It?
Attackers are executing arbitrary code on Joomla websites right now. CISA confirmed it. Here is what UK small businesses need to do today.
Read more →
Seven Years of UK GDPR: Why the Data Broker Market Has Never Been Bigger
UK GDPR came into force in 2018. Seven years on the data broker market has grown and zero monetary penalties have been imposed on a UK data broker.
Read more →
Threat Analysis: Russian State Actors, ShareFile Emergency Shutdown, and DocuSign RMM Abuse, What UK SMBs Need to Know
The NCSC has joined a Nine-Eyes advisory on Russian state actors targeting poorly configured routers. Meanwhile, Progress ShareFile has ordered an emergency server shutdown over an undisclosed threat.
Read more →
The Regulator Who Looked the Other Way: GDPR, Data Brokers, and UK Directors
UK GDPR gave individuals the right to erasure in 2018. The commercial data broker market has grown every year since. This is not a coincidence.
Read more →
Next Week on The Open Book Problem: The Attacker's Playbook
Next week Mauven MacLeod joins to break down the social engineering chain. How attackers turn a public profile into a targeted attack before sending anything.
Read more →
Seven Years of UK GDPR. The Data Broker Market Has Never Been Bigger.
UK GDPR promised control. Seven years on the ICO has not imposed a monetary penalty on a UK data broker. Lucy Harper joins me today.
Read more →
The Government Built the Best OSINT Database in the World and Called It Transparency
Companies House is a mandatory, public, searchable director database that attackers use daily. The government built it, mandates it, and shrugs at what follows.
Read more →
What the Data Brokers Know About You: A UK Director Investigation
What do UK data brokers actually hold on a small business director? Lucy Harper investigates using public records, enforcement history, and ICO documentation.
Read more →
Threat Analysis: CitrixBleed 2 Ransomware Chain, SilabRAT MaaS, and the NHS Email Incident That Should Not Have Happened
Three stories today that together explain exactly how UK SMBs get compromised in 2026. One is a patched vulnerability nobody patched. One is a £3,900-a-month RAT. One is a CC field.
Read more →
Your Security Tool Has a Hole in It: The Hermes WebUI RCE and the Windows Defender Patch That Breaks Things
Two critical vulnerabilities this week prove that your security tools are now the target. Here is the plain-English briefing.
Read more →
How to Audit Your Own OSINT Exposure: A Step-by-Step Guide for UK Directors
A practical sequenced guide to audit and reduce your public data exposure as a UK SMB director. No tools required. No budget needed. One afternoon.
Read more →
Threat Analysis: Microsoft Defender Zero-Day Patched, Vidar Infostealer Surge, and What the NCSC's New Cyber Essentials Pathway Actually Means
A Defender zero-day with public exploit code, a Vidar infostealer surge hitting developer toolchains, and a quiet but significant change to Cyber Essentials Plus certification.
Read more →
Your WordPress Plugin Is a Loaded Gun: The CVE-2026-58480 File Upload Flaw Explained
CVSS 9.8. No authentication required. A WordPress plugin flaw published yesterday lets attackers run arbitrary code on your server. Here is what it means.
Read more →