News
Plain-English guides on web security, compliance, and keeping your clients protected.
A security weakness in macOS could let an attacker interfere with or disable some of Apple’s built-in protection tools, including browser-related defenses, without needing administrator access or a ke...
Read article →A growing number of organizations have been identified as affected after attackers compromised application vendor Klue and leveraged stolen OAuth tokens to access customer Salesforce environments, acc...
Read article →A newly highlighted weakness in CI/CD workflows is drawing attention to the way open-source and cloud development projects handle code contributions. The issue centers on malicious pull requests, whic...
Read article →Two young men in the United Kingdom have pleaded guilty to charges tied to the August 2024 cyberattack that disrupted Transport for London, the agency overseeing public transit across the London area....
Read article →Cybersecurity leaders from the Five Eyes alliance have issued a joint warning that artificial intelligence is reshaping the threat landscape faster than many organisations are prepared for.In a new ca...
Read article →Security researchers say a long-running Android botnet known as Popa may be connected to NetNut, a residential proxy service operated by publicly traded Israeli company Alarum Technologies Ltd. The fi...
Read article →The UK’s National Cyber Security Centre has published guidance encouraging developers to treat AI-assisted software writing as a continuum rather than an all-or-nothing choice. The agency says so-call...
Read article →The UK’s National Cyber Security Centre (NCSC) has issued new advice after Fortinet firewall and VPN products were caught up in a worldwide targeting campaign that may also have affected some organisa...
Read article →The head of the National Cyber Security Centre has said that hostile states were linked to around three-quarters of cyber incidents affecting organisations in the UK’s critical infrastructure over the...
Read article →Security researchers say they have pieced together a trail that may link the administrator of the ransomware-as-a-service operation known as The Gentlemen to a real-world identity. The group has quick...
Read article →Microsoft has released its June 2026 Patch Tuesday updates, addressing close to 200 security vulnerabilities across Windows and supported products. The total marks a new high for the company’s monthly...
Read article →The UK’s National Cyber Security Centre (NCSC) has warned that attackers are increasingly targeting open source software packages to distribute malware through the software supply chain. The agency sa...
Read article →