Tips to minimise vulnerabilities in web and mobile apps

Far too many organisations run web and mobile apps that are vulnerable to targeted attacks. They may be using unpatched libraries and software components, they may access personally identifiable... Read more »

Legacy SonicWall kit exploited in ransom campaign

Network security specialist SonicWall has told users of two legacy products running unpatched and end-of-life firmware to take immediate and urgent action to head off an “imminent” ransomware campaign.... Read more »

Lawyers take EncroChat hacking operation to French supreme court

Lawyers are heading to the French supreme court to challenge the legality of a police operation which intercepted millions of messages from the EncroChat encrypted phone network. The lawyers... Read more »

REvil ransomware crew drops offline, reasons murky

Dark web infrastructure used by the REvil (aka Sodinokibi) ransomware syndicate dropped offline on Tuesday 13 July, but there is as yet no clarity over why, leaving the security... Read more »

Multiple Microsoft bugs being actively exploited

A bumper July Patch Tuesday update from Microsoft has marked something of a return to the bad old days of 2020, addressing 117 vulnerabilities, 13 of them rated as... Read more »

Can a web app ever be truly secure?

Given the devastating consequences of a vulnerability breach – including loss of trust, brand damage and financial sanctions – it is perhaps no surprise how much software security is... Read more »

Regional cyber clusters score £700k of funding

The UK Cyber Cluster Collaboration (UKC3), a network of 20 regional clusters of security businesses, employers, and other organisations, has been awarded £700,000 worth of funding by the Department... Read more »

Modipwn vulnerability puts millions of building systems at risk

Users of Schneider Electric’s Modicon programmable logic controllers (PLCs), which are widely present in manufacturing, building services automation applications, energy utilities and HVAC systems, are advised to be on... Read more »

Secureworks sets up in EU datacentre for XDR services

Security analytics and threat intel services provider Secureworks has set up a cloud data storage instance in Frankfurt, Germany to more effectively supply its recently launched Taegis extended detection... Read more »

UK Cyber Security Council calls for new push on training

The UK Cyber Security Council – the newly forged organisation tasked with charting a path forward around security education, training, skills and professional development – has issued a call... Read more »
Subscribe to our Newsletter