Ransomware via search results is now a documented attack route. A Bing search for IT software led to full network encryption in 44 hours. Here is why your download policy …
-
-
StegoAd infected 2.6 million users through official browser stores using steganography to hide payloads in images. Here is what UK businesses should audit and lock down.
-
Many organisations receive pen test reports they cannot act on. This guide explains what a thorough penetration test report looks like and the red flags that indicate a poor one.
-
Russian intelligence services exploited Signal’s linked device feature and fake support texts to access thousands of accounts. Here is the exact technique and what to change in your settings today.
-
Russian intelligence is stealing Signal backup recovery keys to read encrypted message histories, without breaking the encryption. Here’s what that means for how UK businesses use secure messaging.
-
Adblock for YouTube has a dormant script injection capability that its owners could activate with one server change. Here is what it means for your organisation and what to do …
-
Operation Endgame disrupted Amadey and StealC infrastructure on a significant scale. But with no arrests, the operators survive intact. Here is what that means for UK businesses building their security …
-
Most UK businesses pen test once a year. But annual testing is a minimum, not a strategy. This guide explains when your penetration test frequency needs to increase and what …
-
An external penetration test simulates an outside attacker probing your perimeter. An internal test simulates what happens once someone is already inside. Both answer different questions, and your organisation probably …
-
Two members of Scattered Spider have pleaded guilty over the 2024 TfL breach. The techniques they used are low-tech and still active. Here is what organisations can do to make …