incident response

US prosecutors say MonsterCloud told clients it could decrypt their files, then quietly paid the criminals and kept the difference. Here is what to ask before you hire help.

Kiteworks asked customers to power down for nine hours after a credible threat warning. Here’s a practical checklist for businesses that depend on any secure file-transfer platform.

Citrix’s confirmed active exploitation of an unauthenticated NetScaler exploit chain means patching alone isn’t enough. Here’s the case for treating it as a possible breach first.

Sucuri has described a WordPress backdoor that hides in files, the database and shared memory, and restores itself after cleanup. Here is what it does and how to check for …

A ransomware readiness assessment checks whether you could stop, contain and recover from an attack. Here is what it covers and the questions to ask first.

The Cisco ISE patch for CVE-2026-76460 isn’t optional. A step-by-step plan for checking versions, patching, and spotting prior compromise.

A data breach is any incident where information is accessed, lost or exposed without authorisation. Here is what counts, how common they are in the UK, what they cost, and …

An unpatched Magento vulnerability is being exploited to backdoor stores with no login needed. Here’s how to check for compromise and cut your risk before a patch exists.

Attackers are exploiting a MikroTik RouterOS flaw with no password needed. Here’s exactly how to check whether your router is already compromised and what to do about it.

Researchers found Aurora ransomware affiliates using the Cursor AI coding assistant to plan and run intrusions against at least ten organisations, exploiting the same Active Directory weaknesses pen testers have …