SOC status:Duty analyst on shift
Insights
Research, detection engineering notes and plain-English explanations for the questions UK boards, IT managers and security leads actually ask. One substantial piece a week; a short threat brief in between.
Get the fortnightly briefing
The week's collection picture has been dominated by continued exploitation of edge-appliance vulnerabilities (Cisco Catalyst SD-WAN CVE-2026-20182, Ivanti EPMM CVE-2026-6973), the Akira and Qilin ransomware crews reaching new weekly leak-site cadence highs…
The reporting cycle has been shaped by sustained state-sponsored espionage interest in UK and EU defence supply-chain entities, continued Chinese APT operational tempo across the supply-chain pivot model that produced the 2024 MOD payroll-provider breach…
During the reporting period 11 May 2026 – 17 May 2026 the trade-body and membership-organisation threat picture remained dominated by data-extortion incidents against organisations holding large volumes of personal data on members, including financial, ethnicity, sexual-orientation…
During the reporting period 11 May 2026 – 17 May 2026 the retail threat picture continued to be defined by the aftermath and direct lineage of the M&S and Co-op cyber attacks attributable to the Scattered Spider / DragonForce affiliate cluster.
During the reporting period 11 May 2026 – 17 May 2026 the maritime and logistics threat picture remained dominated by ransomware and supply-chain compromise against vendor and TOS platforms.
During the reporting period 11 May 2026 – 17 May 2026 the legal-services threat picture remained dominated by ransomware operators targeting law firms as "low-hanging fruit" with disproportionately high client-data sensitivity.
During the reporting period 11 May 2026 – 17 May 2026 the healthcare threat picture remained dominated by ransomware impact on NHS and private-healthcare estates…
During the reporting period 11 May 2026 – 17 May 2026 the financial-services threat picture remained dominated by ransomware and pure data-extortion crews against a backdrop of continued AI-accelerated patch-wave dynamics.
During the reporting period 11 May 2026 – 17 May 2026 the R&D, military and government-contractor threat picture remained dominated by state-sponsored cyber-espionage against the defence industrial base.
The trade-body and membership-organisation threat picture for the reporting period continues to be dominated by phishing and ransomware against organisations holding member-PII at scale, augmented by Russian state-aligned hacktivist activity targeting representative bodies for political signalling.
The retail vertical continues to operate in the wake of the Marks & Spencer / Co-op / Harrods cyber-attack wave of spring 2025 — classed as a Category 2 cyber-event with combined cost estimates of £270m–£440m…
The maritime and logistics threat picture for the reporting period is dominated by the continuing structural escalation in incident volume — CYTUR figures for 2025 reflected a 103 per cent year-on-year rise in maritime cyber incidents…
216 articles · page 7 of 18