SOC status:Duty analyst on shift
Insights
Research, detection engineering notes and plain-English explanations for the questions UK boards, IT managers and security leads actually ask. One substantial piece a week; a short threat brief in between.
Get the fortnightly briefing
The retail-sector collection picture this week continues to be framed by the Scattered Spider / DragonForce campaign that disrupted M&S, Co-op and Harrods through April-May 2025 and which has carried forward into a sustained 2026 pivot toward retail BPO and outsourced customer-service helpdesks.
The maritime-and-logistics collection picture this week has been dominated by the convergence of the new no-patch network-edge defects (Cisco Catalyst SD-WAN Manager CVE-2026-20245 and Arista EOS CVE-2026-7473) with the still-current US Coast Guard MTSA Cyber Regulations compliance window.
The legal-sector collection picture this week sits against an unusually material regulatory backdrop: the Solicitors Regulation Authority's April 2026 consultation on compliance demonstration remains open…
The healthcare-sector collection picture this week sits against the Health-ISAC 2026 Global Health Sector Threat Landscape Report's documented 55% surge in incidents through 2025 and its identification of Qilin, INC Ransom and SAFEPAY as the most active ransomware groups targeting health entities.
The financial-services collection picture this week has been dominated by the addition of six further vulnerabilities to the CISA KEV catalogue, three of them confirmed under active in-the-wild exploitation against FS-relevant edge infrastructure: Cisco Catalyst SD-WAN Manager (CVE-2026-20245…
The R&D and defence-contractor collection picture this week continues to be defined by sustained China-, Russia-, DPRK- and Iran-linked cyber pressure against the Western defence industrial base…
The trade-body and membership-organisation collection picture this week has been shaped by continuing ransomware and data-extortion interest in member-data and event-attendee datasets, with the Lynx / ShinyHunters cluster the principal pure-data-extortion threat against the vertical.
The retail collection picture this week has been dominated by the continuing fallout from the 2025 Scattered Spider / DragonForce campaign against UK retailers, with M&S, Co-op and Harrods continuing to feature in trade-press analysis of the cyber-loss cycle.
The maritime collection picture this week is dominated by the convergence of three structural factors: continuing IT-side ransomware pressure against port operators and freight forwarders…
The legal-sector collection picture this week has been shaped by continuing ransomware and data-extortion pressure against UK and EU law firms, with the May 2026 leak-site cadence placing professional services in the top three target verticals by posting volume.
The healthcare collection picture this week has been shaped by the Health-ISAC 2026 threat-landscape report's continuing emphasis on Qilin, INC Ransom and SAFEPAY as the most active groups targeting health entities, with AI-enabled attack tactics flagged as the number-one concern for the year.
The financial-services collection picture this week has been shaped by the addition of three further CVEs to the CISA KEV catalogue on 02 and 03 June - CVE-2022-0492 (Linux Kernel cgroup releaseagent, revived for container-escape campaigns against cloud-banking workloads)…
229 articles · page 6 of 20