Attackers used stolen staff passwords to take data on about 678,000 people and businesses from France’s tax agency. The ANSSI report shows what was missing, and what UK firms should …
-
-
What a penetration test involves for an accountancy practice, what it should cover, how often to run one and how to pick a tester.
-
Attackers used a Custom GPT on OpenAI’s own domain to push a fake ChatGPT and a ClickFix lure. Here is how the chain worked and what to check.
-
Cross site scripting lets attackers run their own code in your visitors’ browsers. Here are the three types, what the damage looks like and how to fix it.
-
Sucuri has described a WordPress backdoor that hides in files, the database and shared memory, and restores itself after cleanup. Here is what it does and how to check for …
-
What penetration testing means for a UK solicitors’ practice, what the SRA expects, what a test should cover and how to get value from the report.
-
Fortinet has confirmed active exploitation of CVE-2026-104286, a CVSS 9.8 flaw in FortiMail. Here is what it does, who is affected and what to do before a fix reaches you.
-
A ransomware readiness assessment checks whether you could stop, contain and recover from an attack. Here is what it covers and the questions to ask first.
-
The Trust Services Criteria never mention a pentest by name, yet auditors expect one for every SOC 2 report. Here is what actually drives that expectation.
-
UK insurers increasingly ask for evidence of penetration testing before they will quote or pay out on cyber cover. Here is what they actually require and how to get ready …