SOC status:Duty analyst on shift
Insights
Research, detection engineering notes and plain-English explanations for the questions UK boards, IT managers and security leads actually ask. One substantial piece a week; a short threat brief in between.
Get the fortnightly briefing
The healthcare collection picture this week has been shaped by the Health-ISAC 2026 threat-landscape report's continuing emphasis on Qilin, INC Ransom and SAFEPAY as the most active groups targeting health entities, with AI-enabled attack tactics flagged as the number-one concern for the year.
The financial-services collection picture this week has been shaped by the addition of three further CVEs to the CISA KEV catalogue on 02 and 03 June - CVE-2022-0492 (Linux Kernel cgroup releaseagent, revived for container-escape campaigns against cloud-banking workloads)…
The R&D / defence-industrial-base collection picture this week has been shaped by continuing state-sponsored espionage activity against UK and EU contractors, with ESET's October-2025-to-March-2026 APT activity report (released 28 May) flagging sustained Chinese (Mustang Panda…
Trade bodies and membership organisations sit at the intersection of three distinct threat pressures: criminal cyber operators attracted by the relatively high-value, low-friction donor and member personal-data holdings…
The week's collection picture is shaped first by M&S's 20 May annual results disclosure confirming the April 2025 Scattered Spider / DragonForce attack cost £300m in lost trading and supply-chain disruption — pre-tax profit down 23.8% to £671.4m for the year to 29 March…
The sector remains under elevated pressure: Cydome's May 2026 reporting places 2025 maritime cyber incident growth at 103% year-on-year, with OT-targeted attacks specifically up 150%, and GPS spoofing now affecting some 40,000 vessels per day worldwide.
The vertical remains under sustained pressure from organised criminal cyber actors, with the SRA 2024 Risk Outlook continuing to identify phishing, conveyancing fraud and ransomware as the three highest-impact risks to UK firms…
The vertical continues to absorb sustained ransomware and supply-chain pressure: the Synnovis pathology incident's twelve-month follow-on disclosure recorded 122 patient-safety incidents and a patient death assessed as cyber-attack-contributing at King's College Hospital…
The collection picture this week has been dominated by the continued exploitation of edge-appliance vulnerabilities — Cisco Catalyst SD-WAN (CVE-2026-20182) under Emergency Directive 26-03, the Ivanti EPMM credential-reuse chain (CVE-2026-6973)…
The week's collection picture is shaped by GCHQ Director Sir Anne Keast-Butler's 27 May warning that 'time is running out for the West' to confront the threats from Russia and China; by ESET's 28 May APT Activity Report covering October 2025 to March 2026 with sustained China, Russia…
The vertical sits at the intersection of regulatory-data-handling, professional-credential-stewardship and member-facing digital service delivery, which carries a distinct risk profile dominated by data-extortion, account-credential abuse, and reputational-impact attacks.
The reporting cycle has been shaped by sustained Scattered Spider / DragonForce cartel activity following the M&S, Co-op and Harrods incidents of April–May 2025, continued exploitation of edge-appliance CVEs…
219 articles · page 6 of 19