SOC status:Duty analyst on shift
Insights
Research, detection engineering notes and plain-English explanations for the questions UK boards, IT managers and security leads actually ask. One substantial piece a week; a short threat brief in between.
Get the fortnightly briefing
The sector remains under elevated pressure: Cydome's May 2026 reporting places 2025 maritime cyber incident growth at 103% year-on-year, with OT-targeted attacks specifically up 150%, and GPS spoofing now affecting some 40,000 vessels per day worldwide.
The vertical remains under sustained pressure from organised criminal cyber actors, with the SRA 2024 Risk Outlook continuing to identify phishing, conveyancing fraud and ransomware as the three highest-impact risks to UK firms…
The vertical continues to absorb sustained ransomware and supply-chain pressure: the Synnovis pathology incident's twelve-month follow-on disclosure recorded 122 patient-safety incidents and a patient death assessed as cyber-attack-contributing at King's College Hospital…
The collection picture this week has been dominated by the continued exploitation of edge-appliance vulnerabilities — Cisco Catalyst SD-WAN (CVE-2026-20182) under Emergency Directive 26-03, the Ivanti EPMM credential-reuse chain (CVE-2026-6973)…
The week's collection picture is shaped by GCHQ Director Sir Anne Keast-Butler's 27 May warning that 'time is running out for the West' to confront the threats from Russia and China; by ESET's 28 May APT Activity Report covering October 2025 to March 2026 with sustained China, Russia…
The vertical sits at the intersection of regulatory-data-handling, professional-credential-stewardship and member-facing digital service delivery, which carries a distinct risk profile dominated by data-extortion, account-credential abuse, and reputational-impact attacks.
The reporting cycle has been shaped by sustained Scattered Spider / DragonForce cartel activity following the M&S, Co-op and Harrods incidents of April–May 2025, continued exploitation of edge-appliance CVEs…
The reporting cycle has been shaped by continued growth in maritime cyber incidents (CYTUR's 103% YoY increase indicator carried forward into Q2 2026), the West Pharmaceutical Services ransomware event affecting shipping and manufacturing logistics, and the persistent operational risk to AIS…
The reporting cycle has been characterised by sustained ransomware pressure against UK and EU firms, continued SRA regulatory attention to cyber-incident reporting (over 2,300 breach reports in 2025)…
The reporting cycle has been shaped by Health-ISAC's continued elevation of ransomware as the \#1 threat to healthcare (455 health-sector ransomware incidents globally in their 2026 retrospective)…
The week's collection picture has been dominated by continued exploitation of edge-appliance vulnerabilities (Cisco Catalyst SD-WAN CVE-2026-20182, Ivanti EPMM CVE-2026-6973), the Akira and Qilin ransomware crews reaching new weekly leak-site cadence highs…
The reporting cycle has been shaped by sustained state-sponsored espionage interest in UK and EU defence supply-chain entities, continued Chinese APT operational tempo across the supply-chain pivot model that produced the 2024 MOD payroll-provider breach…
226 articles · page 7 of 19