Bitget says attackers exploited a third-party security product to steal high-level credentials and drain about $388 million. Here is what happened and what to test for.
-
-
A security misconfiguration is a setting left wrong, not a software bug. Here is how they happen, the ten most common types, and how to find and fix them.
-
Attackers used stolen staff passwords to take data on about 678,000 people and businesses from France’s tax agency. The ANSSI report shows what was missing, and what UK firms should …
-
What a penetration test involves for an accountancy practice, what it should cover, how often to run one and how to pick a tester.
-
Attackers used a Custom GPT on OpenAI’s own domain to push a fake ChatGPT and a ClickFix lure. Here is how the chain worked and what to check.
-
Cross site scripting lets attackers run their own code in your visitors’ browsers. Here are the three types, what the damage looks like and how to fix it.
-
Sucuri has described a WordPress backdoor that hides in files, the database and shared memory, and restores itself after cleanup. Here is what it does and how to check for …
-
What penetration testing means for a UK solicitors’ practice, what the SRA expects, what a test should cover and how to get value from the report.
-
Fortinet has confirmed active exploitation of CVE-2026-104286, a CVSS 9.8 flaw in FortiMail. Here is what it does, who is affected and what to do before a fix reaches you.
-
A ransomware readiness assessment checks whether you could stop, contain and recover from an attack. Here is what it covers and the questions to ask first.