684 articles · Page 9 of 35
Next week Graham Falkner joins Noel to examine the paid removal industry. Not scams. But you are paying monthly to exercise rights you already own for free.
Read more →
UK GDPR gives everyone data rights. In practice those rights require sustained effort most people cannot maintain. That is the structural problem.
Read more →
FortiSandbox flaws are being actively exploited, a Windows zero-day with no patch is now public, and ClickFix attacks are hitting UK businesses daily. Here is what you need to know.
Read more →
Lucy Harper examines the accountability questions the ICO has not yet answered about UK data broker oversight, using the published enforcement record.
Read more →
CISA added a Microsoft SharePoint remote code execution flaw to its active exploitation list on 16 July 2026. Here is what UK small businesses need to do today.
Read more →
Five and a half years each for the TfL hackers. A Russian group hiding malware inside legitimate collaboration tools. And a supply chain worm loose in the npm ecosystem. Here is what today actually means.
Read more →
Most UK GDPR erasure requests to data brokers fail because they are vague, undocumented, or not followed up. Here is the process that produces results.
Read more →
570 Microsoft patches. A Windows zero-day PoC published hours later. A building automation protocol now on the CISA KEV list. This week is not one to ignore.
Read more →
Hello, Mauven here. The Upper Tribunal dismissed the ICO's Experian appeal in April 2024. Here is what the outcome signals about UK data broker regulation.
Read more →
Two Microsoft zero-days are being actively exploited right now. One requires no login whatsoever. Here is what to do before close of business.
Read more →
SonicWall zero-days are being exploited in the wild. Microsoft patched 570 flaws in one go. Here is what actually matters for your business this week.
Read more →
Three stories today that UK SMBs cannot afford to ignore: SharePoint flaws being actively exploited, a sophisticated AiTM phishing operation, and a poisoned npm supply chain.
Read more →
Your MFA is not the safety net you think it is. Two new phishing kits are bypassing it right now, and AI is doing the heavy lifting for attackers.
Read more →
Attackers are executing arbitrary code on Joomla websites right now. CISA confirmed it. Here is what UK small businesses need to do today.
Read more →
UK GDPR came into force in 2018. Seven years on the data broker market has grown and zero monetary penalties have been imposed on a UK data broker.
Read more →
The NCSC has joined a Nine-Eyes advisory on Russian state actors targeting poorly configured routers. Meanwhile, Progress ShareFile has ordered an emergency server shutdown over an undisclosed threat.
Read more →
UK GDPR gave individuals the right to erasure in 2018. The commercial data broker market has grown every year since. This is not a coincidence.
Read more →
Next week Mauven MacLeod joins to break down the social engineering chain. How attackers turn a public profile into a targeted attack before sending anything.
Read more →
UK GDPR promised control. Seven years on the ICO has not imposed a monetary penalty on a UK data broker. Lucy Harper joins me today.
Read more →
Companies House is a mandatory, public, searchable director database that attackers use daily. The government built it, mandates it, and shrugs at what follows.
Read more →