UK businesses should start to plan for required changes to their cybersecurity programs ahead of the Cyber Security and Resilience Bill

Organisations urged to familiarise themselves with the threat and take immediate action to protect themselves.

Discover how a phishing attack led to domain takeover and certificate abuse in this detailed study. Learn key lessons, red flags, and how to strengthen your defenses against similar threats.

Sophos has observed DragonForce attacking rival ransomware operators including RansomHub as it seeks to expand its reach in the cybercrime marketplace

A host of ransomware strains have been neutralized, servers seized, and key players indicted

A new Europol-led operation has dismantled infrastructure for key initial access malware used to launch ransomware attacks

Operation Raptor also resulted in the seizure of $184m and a record amount of illegal drugs, firearms and drug trafficking proceeds

Cyble highlights major IT vulnerabilities and ICS flaws, including those exploited by threat actors. Security teams urged to prioritize critical patches.

Three zero-days allow an attacker to completely compromise the Concerto application and the host system running it. The vendor has yet to address the issues after being notified three months ago.

The key to navigating this new GenAI landscape is a balanced approach — one that fosters transparency, strengthens regulatory frameworks, and embraces privacy-enhancing technologies.

The incident at Kettering Health disrupted procedures for patients

ESET Research shares its findings on the workings of Danabot, an infostealer recently disrupted in a multinational law enforcement operation.