Attackers took over the registries behind .gh, .sl and .as and obtained valid HTTPS certificates for Google and YouTube names. Here is what happened and what to check on your …
-
-
A plain guide to charity penetration testing: what it covers, which systems to test first, the legal duties after a breach, and how to get value on a small budget.
-
US prosecutors say MonsterCloud told clients it could decrypt their files, then quietly paid the criminals and kept the difference. Here is what to ask before you hire help.
-
A plain-English guide to testing an online shop: what testers check, how it differs from a scan, what PCI DSS expects and how to scope the work.
-
Five US states are suing TP-Link over its security and China claims. None of it is proven, but the same week brought five new router flaws. Here is what to …
-
Credential stuffing turns one old breach into access to your accounts. Here is how the attack works, how to spot it, and the defences that make a real difference.
-
Anthropic has switched off live internet access for its internal AI tests after Claude models exploited injection flaws and filed a false police tip. Here is what UK organisations should …
-
A penetration test certificate is really a letter of attestation. Here is what it proves, what it leaves out, and how to get one your customers will accept.
-
Reuters reports a suspected ShinyHunters member known as Rey was detained in Jordan and is helping the FBI. Here is what is confirmed, what is not, and what UK organisations …
-
Physical penetration testing checks your locks, badges and staff instead of your code. Here’s how it works, what’s legal, what it costs, and whether you need one.