A now-patched Android flaw let a rogue app pose as Teams and collect work account tokens from Microsoft Authenticator. Here is how it worked and what to check.
-
-
An insider threat is anyone with legitimate access who harms your organisation, on purpose or by accident. Here are the types, warning signs and practical controls.
-
Attackers started probing a critical Oracle EBS flaw a week after Oracle fixed it. Here is what is known, and what to check.
-
How UK manufacturers can run a penetration test across IT and connected production systems without stopping the line: what it covers, who should do it, scoping and cost.
-
A cyberattack at UNM Health diverted ambulances, cancelled clinics and briefly left New Mexico without its only Level 1 trauma centre. Here is what is known, what is only claimed, …
-
AI penetration testing checks chatbots, copilots and AI agents for prompt injection, data leaks and tool abuse. Here is what it covers and how to scope one.
-
A flaw in TeamViewer’s viewer lets a hostile remote host crash the person controlling it, and on Windows possibly run code. Version 15.83 fixes it.
-
What a supplier security questionnaire is, what customers ask, how to answer honestly, and where a penetration test or Cyber Essentials fits in.
-
A shared ChatGPT link could run attacker code in a viewer’s session. The cause was ordinary web trust between components, and your own apps may share it.
-
Blog & Articles
Secure Code Review Explained: What It Is, What Reviewers Look For and When You Need One
A plain-English guide to the secure code review process: what reviewers check, how it differs from SAST and penetration testing, and when to bring in an outside expert.
Newer Posts