A critical flaw in one of WordPress's most popular backup plugins leaves millions of sites exposed to account takeover. Here is what happened, what to check, and what to do now.

Microsoft's September 2026 Patch Tuesday patches nine Critical vulnerabilities in Office, Azure and Dynamics 365. Here is what UK businesses need to do now, and what we have already done for managed clients.

A zero-day vulnerability in Chrome's V8 engine is actively being exploited. Every business using Chrome or Edge needs to check their browser versions today.

If your website uses the Elementor Pro page builder, there is an actively exploited security flaw that needs your attention right now....

Two actively exploited zero-days in SonicWall SMA1000 remote access appliances can be chained for unauthenticated remote code execution. A patch is available. If you run an SMA1000, upgrade now.

Two newly disclosed PHP vulnerabilities, collectively being referred to as "PHP2SHELL", have prompted emergency security updates across the hosting industry. With researchers warning that the flaws could allow remote code execution on vulnerable servers and reports indicating that exploitation attempts are already underway, businesses should act quickly to ensure their websites, applications and hosting environments are fully patched. In this article, we explain what happened, who may be affected, and the practical steps organisations can take to protect themselves from this latest cybersecurity threat.

Two critical zero-day flaws in PaperCut NG and MF are being actively exploited. Added to the CISA Known Exploited Vulnerabilities list on 31 August 2026, both can be chained to give attackers full remote access without any credentials. Here is what to do.

An authentication bypass in Microsoft SharePoint Server (CVE-2026-55040) is now being actively exploited following the public release of working exploit code. If you run SharePoint Server on your own network, this needs your attention today.