News
Plain-English guides on web security, compliance, and keeping your clients protected.
The UK government has unveiled a new voluntary Cyber Resilience Pledge, with 60 organisations joining at launch, including Marks & Spencer, Microsoft, Aviva, Fujitsu, the London Stock Exchange Gro...
Read article →The UK’s National Cyber Security Centre (NCSC) and the Department for Science, Innovation and Technology (DSIT) are working on a new national cyber defence concept called Cyber Shield, aimed at streng...
Read article →Tarah Wheeler, now CISO at TPO Group, has taken an unusual path into cybersecurity. The firm, whose name stands for technology, policy and operations, advises organizations in high-risk sectors, inclu...
Read article →Spanish National Police have arrested a man in Palencia who is believed to have supported the pro-Russian hacktivist collectives CyberArmy of Russia Reborn (CARR) and Z-Pentest. Authorities say the ca...
Read article →BeyondTrust has released security updates for two of its remote access products after finding critical flaws that could let attackers bypass authentication and gain unauthorized access under certain c...
Read article →Security researchers have identified a GitHub Actions weakness that can remain invisible to standard CI security tools because the problem lies not in a single workflow file, but in how multiple workf...
Read article →Researchers have disclosed a Linux kernel vulnerability that could allow a malicious virtual machine to escape its sandbox and affect the host system. The issue, tracked as CVE-2026-53359 and nickname...
Read article →Keyfactor has raised a strategic growth investment of more than $1 billion, a deal the company says will support expansion of its identity and cryptographic security platform as organizations prepare...
Read article →BleepingComputer is scheduled to host a live webinar on July 8 focused on how organizations can better defend against modern email-based attacks. The session, titled “Stop chasing alerts: Automating e...
Read article →A long-running Linux kernel bug has been fixed after security researchers showed it could let an attacker escape a virtual machine and run code on the underlying host. The issue, tracked as CVE-2026-5...
Read article →Microsoft plans to change the default behavior of its Windows settings backup feature for certain enterprise devices. Starting with Windows 11 version 26H2, the company says the backup policy will be...
Read article →BeyondTrust has issued security updates for its Remote Support (RS) and Privileged Remote Access (PRA) products after discovering two critical vulnerabilities that could let attackers bypass authentic...
Read article →