A critical WordPress vulnerability is being actively exploited to take over websites, and if you run a WordPress site it needs your...

The National Cyber Security Centre (NCSC) has published a cyber threat report aimed specifically at UK law firms, and it is relevant...

A critical flaw in the miniOrange OAuth SSO plugin (CVSS 9.8) lets unauthenticated attackers log in as WordPress administrator with no password. No official patch has been released. Here is what to do right now.

CISA has added CVE-2026-18577, an actively exploited auth bypass in N-able N-central, to its Known Exploited Vulnerabilities catalog. Here's what happened and why it matters even if you don't use N-central.

Beacon CRM, used by over 1,500 UK charities, has confirmed a breach where database backups were likely downloaded by an unauthorised third party. Here's what happened and how to defend against this kind of supply-chain attack.

For years, the standard advice for spotting a scam was to look for the tell-tale signs: clumsy grammar, an odd email address,...

The NCSC has joined agencies from 14 partner nations to warn of a Russian state-backed group called LAUNDRY BEAR, which steals business emails using a zero-click attack in Zimbra webmail. Here is what UK businesses need to know and do.

Microsoft's July 2026 Patch Tuesday is the largest security update in the company's history, fixing more than 570 vulnerabilities including two actively exploited zero-days affecting Windows systems used across the UK.