incident response

A cyberattack at UNM Health diverted ambulances, cancelled clinics and briefly left New Mexico without its only Level 1 trauma centre. Here is what is known, what is only claimed, …

A plain, ordered guide to the first hours and days after a ransomware attack: isolate, report, investigate, recover safely and decide on payment.

US prosecutors say MonsterCloud told clients it could decrypt their files, then quietly paid the criminals and kept the difference. Here is what to ask before you hire help.

Kiteworks asked customers to power down for nine hours after a credible threat warning. Here’s a practical checklist for businesses that depend on any secure file-transfer platform.

Citrix’s confirmed active exploitation of an unauthenticated NetScaler exploit chain means patching alone isn’t enough. Here’s the case for treating it as a possible breach first.

Sucuri has described a WordPress backdoor that hides in files, the database and shared memory, and restores itself after cleanup. Here is what it does and how to check for …

A ransomware readiness assessment checks whether you could stop, contain and recover from an attack. Here is what it covers and the questions to ask first.

The Cisco ISE patch for CVE-2026-76460 isn’t optional. A step-by-step plan for checking versions, patching, and spotting prior compromise.

A data breach is any incident where information is accessed, lost or exposed without authorisation. Here is what counts, how common they are in the UK, what they cost, and …

An unpatched Magento vulnerability is being exploited to backdoor stores with no login needed. Here’s how to check for compromise and cut your risk before a patch exists.