Researcher finds 10 vulnerabilities in Cisco firewalls

Threat researchers at Rapid7 have disclosed 10 separate security issues in Cisco firewall products that could leave hundreds of thousands of organisations all over the world exposed to potentially serious supply chain... Read more »

Cisco averts cyber disaster after successful phishing attack

Cisco has revealed that it has fought off a potentially damaging cyber incident that unfolded after a threat actor conducted a phishing attack on one of its employees by abusing their personal... Read more »

NHS may take a month to recover from supply chain attack

NHS customers using Advanced Software’s Adastra clinical patient management platform – including the frontline 111 service – have been warned that they could face a month-long wait to fully recover their normal... Read more »

GitHub targets vulnerable open source components

GitHub has introduced an automated alert mechanism to enable developers to address vulnerabilities in the open source components their code uses. According to GitHub, the new feature, called Dependabot alert for vulnerable... Read more »

Microsoft fixes two-year-old MSDT vulnerability in August update

Two-and-a-half years after a security researcher publicly disclosed the existence of a remote code execution (RCE) zero-day vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT), dubbed DogWalk, Microsoft has finally issued a... Read more »

‘Coopetition’ a growing trend among ransomware gangs

More and more ransomware victims are finding they are being attacked by multiple gangs, with attacks taking place in waves that can be days or weeks apart, and sometimes even occur simultaneously,... Read more »

Cyber insurance getting harder to obtain

The number of organisations that will either be unable to afford cyber insurance, end up with insufficient coverage, or be refused a policy altogether, looks set to double in the next 12... Read more »

NHS recovering key services after attack on supplier

NHS bodies around the UK are still restoring services after a cyber attack hit one of its suppliers before the weekend, taking out its 111 emergency advice line and causing disruption to... Read more »

Reliance on PSN may have exacerbated cyber attack impact

The UK government’s Central Digital and Data Office (CDDO) has tendered for a supplier to assist in the long-anticipated and inevitably delayed migration of the public sector off the Public Services Network... Read more »

The dangers of the UK’s illogical war on encryption

In a 21st century war, what happens online impacts events on the ground. Reliable, secure communication channels in Ukraine have delivered crucial information from President Zelenskyy directly to the people, and allowed... Read more »