SOC status:Duty analyst on shift
Insights
Research, detection engineering notes and plain-English explanations for the questions UK boards, IT managers and security leads actually ask. One substantial piece a week; a short threat brief in between.
Get the fortnightly briefing
The R&D / defence-industrial-base collection picture this week has been shaped by continuing state-sponsored espionage activity against UK and EU contractors, with ESET's October-2025-to-March-2026 APT activity report (released 28 May) flagging sustained Chinese (Mustang Panda…
Trade bodies and membership organisations sit at the intersection of three distinct threat pressures: criminal cyber operators attracted by the relatively high-value, low-friction donor and member personal-data holdings…
The week's collection picture is shaped first by M&S's 20 May annual results disclosure confirming the April 2025 Scattered Spider / DragonForce attack cost £300m in lost trading and supply-chain disruption — pre-tax profit down 23.8% to £671.4m for the year to 29 March…
The sector remains under elevated pressure: Cydome's May 2026 reporting places 2025 maritime cyber incident growth at 103% year-on-year, with OT-targeted attacks specifically up 150%, and GPS spoofing now affecting some 40,000 vessels per day worldwide.
The vertical remains under sustained pressure from organised criminal cyber actors, with the SRA 2024 Risk Outlook continuing to identify phishing, conveyancing fraud and ransomware as the three highest-impact risks to UK firms…
The vertical continues to absorb sustained ransomware and supply-chain pressure: the Synnovis pathology incident's twelve-month follow-on disclosure recorded 122 patient-safety incidents and a patient death assessed as cyber-attack-contributing at King's College Hospital…
The collection picture this week has been dominated by the continued exploitation of edge-appliance vulnerabilities — Cisco Catalyst SD-WAN (CVE-2026-20182) under Emergency Directive 26-03, the Ivanti EPMM credential-reuse chain (CVE-2026-6973)…
The week's collection picture is shaped by GCHQ Director Sir Anne Keast-Butler's 27 May warning that 'time is running out for the West' to confront the threats from Russia and China; by ESET's 28 May APT Activity Report covering October 2025 to March 2026 with sustained China, Russia…
The vertical sits at the intersection of regulatory-data-handling, professional-credential-stewardship and member-facing digital service delivery, which carries a distinct risk profile dominated by data-extortion, account-credential abuse, and reputational-impact attacks.
The reporting cycle has been shaped by sustained Scattered Spider / DragonForce cartel activity following the M&S, Co-op and Harrods incidents of April–May 2025, continued exploitation of edge-appliance CVEs…
The reporting cycle has been shaped by continued growth in maritime cyber incidents (CYTUR's 103% YoY increase indicator carried forward into Q2 2026), the West Pharmaceutical Services ransomware event affecting shipping and manufacturing logistics, and the persistent operational risk to AIS…
The reporting cycle has been characterised by sustained ransomware pressure against UK and EU firms, continued SRA regulatory attention to cyber-incident reporting (over 2,300 breach reports in 2025)…
229 articles · page 7 of 20