Strip away the tooling and the reputation, and a penetration test technically matches the definition of a crime under the Computer Misuse Act. Here is why authorisation is the only …
-
-
A record 93 active ransomware groups sounds alarming, but Q2 2026 data suggests ransomware market fragmentation is a sign of pressure, not strength.
-
Two chained Microsoft SharePoint flaws, patched in July and August, let an attacker take over an on-premises server without any credentials at all.
-
A practical checklist for scoping SC cleared penetration testing: when the CHECK scheme makes it mandatory, why CREST accreditation isn’t the same thing, and what to ask suppliers before you …
-
Attackers weaponised a VMware vCenter flaw within five days of disclosure. That speed should change how businesses think about critical patching.
-
N-able’s patch for its N-central platform didn’t fully close the door attackers used. Here is the step-by-step check for anyone running it, beyond just installing the update.
-
Veeam, HashiCorp’s Terraform MCP Server and Django all patched critical flaws within 48 hours, including a CVSS 10.0 bug. Here’s what happened and what to check.
-
A buyer’s guide to penetration testing methodology: what a proper process includes, red flags in a weak one, and the questions to ask before you commission a test.
-
A critical TeamCity flaw is being actively exploited. Here is a practical, step-by-step checklist for UK businesses to confirm exposure, patch and check for compromise.
-
A WordPress XSS vulnerability patched in version 7.0.3 needed no login to start. Here’s a plain-English explainer and five checks for your own sites.
Newer Posts