IT security checklist

A WordPress XSS vulnerability patched in version 7.0.3 needed no login to start. Here’s a plain-English explainer and five checks for your own sites.

A step-by-step look at how the Atomic macOS Stealer infects Mac users through fake fix-it websites, and a practical checklist for businesses to reduce the risk.

Operation BlueDash disguises real remote monitoring software as a Microsoft Teams update. Four practical checks help you catch an unauthorised install before it does damage.

BeyondTrust has fixed two pre-authentication bypass flaws in Remote Support and Privileged Remote Access. Here is a practical checklist for IT teams still running self-hosted appliances.