1. Executive summary An unattributed actor is running a "TerminalFix" campaign — a variant of the ClickFix social-engineering technique that tricks users into pasting
1. Executive summary ESET has identified a technique, named "GuardBreaker", in which a Russia-aligned actor deliberately embeds safety-triggering text — specifically the comment
1. Executive summary On August 27, 2026, Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — disclosed a data breach affecting customer
1. Executive summary Kaspersky reports a campaign distributing the ValleyRAT backdoor disguised as a signed Chinese desktop-wallpaper adware application (QN Wallpaper), delivered via installers masquerading
1. Executive summary On 31 August 2026, the ransomware group operating under the name "incransom" listed the UK-registered lighting design firm Lichtvision (www.
1. Executive summary Sygnia has published incident-response findings on a China-nexus espionage actor tracked as Fire Ant expanding from its 2025 VMware ESXi/vCenter
1. Executive summary Check Point's weekly intelligence report covers four items with direct operational relevance to EMEA financial services: emergency PaperCut fixes for two
1. Executive summary Polling of 2,000 British adults found substantial opposition to government access to encrypted communications, including through secret orders issued to technology providers.
1. Executive summary Five critical vulnerabilities have been disclosed in widely deployed WordPress plugins and themes — WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP — reported by
1. Executive summary Microsoft reports a TerminalFix campaign using compromised websites and fake Cloudflare CAPTCHA prompts to induce users to execute clipboard-delivered PowerShell. The resulting
1. Executive summary On 28 August 2026, the Qilin ransomware group listed "Whitehouse" (UK; domain www.whitehouseandco.com) as a victim on its leak
1. Executive summary PaperCut NG and PaperCut MF are under active exploitation via a pre-authentication remote code execution (RCE) chain comprising two vulnerabilities: CVE-2026-