News
Plain-English guides on web security, compliance, and keeping your clients protected.
Security researchers say attackers are abusing Microsoft Teams to impersonate helpdesk personnel and convince employees to give them remote access, leading to malware installation on victim machines.A...
Read article →The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is reportedly using Anthropic’s Mythos AI model to review government software for security weaknesses, according to a Reuters report ci...
Read article →Attackers are actively exploiting a critical Adobe ColdFusion vulnerability that was patched in late June, according to threat researchers and Canadian government warnings. The issue, tracked as CVE-2...
Read article →Spanish police have arrested a man in Palencia whom investigators believe maintained ties to several pro-Russia hacktivist groups connected to attacks on critical infrastructure. The detention, which...
Read article →Researchers at Check Point say an Iran-linked advanced persistent threat group has been using a modular command-and-control framework in operations aimed at organizations in Israel. The activity has b...
Read article →The CERT Coordination Center (CERT/CC) has issued an alert about a hidden authentication mechanism found in several Tenda router firmware releases. The flaw, tracked as CVE-2026-11405, can allow an at...
Read article →The UK government has unveiled a new voluntary Cyber Resilience Pledge, with 60 organisations joining at launch, including Marks & Spencer, Microsoft, Aviva, Fujitsu, the London Stock Exchange Gro...
Read article →The UK’s National Cyber Security Centre (NCSC) and the Department for Science, Innovation and Technology (DSIT) are working on a new national cyber defence concept called Cyber Shield, aimed at streng...
Read article →Tarah Wheeler, now CISO at TPO Group, has taken an unusual path into cybersecurity. The firm, whose name stands for technology, policy and operations, advises organizations in high-risk sectors, inclu...
Read article →Spanish National Police have arrested a man in Palencia who is believed to have supported the pro-Russian hacktivist collectives CyberArmy of Russia Reborn (CARR) and Z-Pentest. Authorities say the ca...
Read article →BeyondTrust has released security updates for two of its remote access products after finding critical flaws that could let attackers bypass authentication and gain unauthorized access under certain c...
Read article →Security researchers have identified a GitHub Actions weakness that can remain invisible to standard CI security tools because the problem lies not in a single workflow file, but in how multiple workf...
Read article →