SAP has patched a maximum-severity kernel vulnerability that lets attackers run commands on SAP servers without logging in. Here is what OVERPASS affects and how to respond.
-
-
Business email compromise costs businesses billions a year without a single virus or hacked network. Here’s how BEC scams work, the main types, and the defences that actually stop them.
-
A data breach is any incident where information is accessed, lost or exposed without authorisation. Here is what counts, how common they are in the UK, what they cost, and …
-
Attackers are phoning executives, posing as IT support, to steal Microsoft 365 logins. Four cheap checks close most of the gap this technique relies on.
-
CHECK penetration testing is the NCSC’s accreditation for testers working on UK government and CNI systems. Here’s why it exists, who must use it, and how it stacks up against …
-
A newly documented intrusion shows how DLL sideloading attacks let a signed Python binary quietly load and run attacker code. Here’s the chain, and what to test for.
-
A buyer’s guide to assumed breach penetration testing: how it works, how it differs from a standard test or red team, and how to tell if your organisation is ready …
-
A quick way to work out whether your organisation needs ICS or SCADA penetration testing, who a genuine OT specialist looks like, and how to scope a safe first engagement.
-
A checklist-style guide to what a penetration testing rules of engagement document should contain, who needs to sign it, and what happens when it’s skipped.
-
Zero trust security stops one stolen password from reaching everything else. Here is what it takes in practice, a realistic starting checklist, and the mistakes businesses make along the way.