The UK government has recently announced a public consultation seeking views on three proposals aimed at striking a significant blow to the ransomware criminal business model. As outlined by the National Cyber Security Centre (NCSC), the consultation will consider three proposals: The ultimate goal is to protect UK CNI and the broader economy from the … Read more
Imagine trying to secure your home with a state-of-the-art alarm system while leaving a window open. This is the reality for many organisations today when it comes to their Operational Technology (OT) networks. Hackers have identified this gap and are increasingly exploiting OT systems, which are essential to industries such as energy, manufacturing, and transportation. … Read more
2025 is shaping up to be a pivotal year for cybersecurity compliance in the UK and the EU. Businesses must prepare to align with new regulations designed to counter the evolving cyber threat landscape. With stricter requirements on the horizon, it’s essential to understand what these changes mean and how they will impact your operations. … Read more
Recent headlines have highlighted a significant privacy violation involving Netflix, resulting in a €4.75 million fine by the Dutch Data Protection Authority (DPA). The issue stemmed from Netflix’s failure to provide clear and sufficient information about how users’ personal data was processed between 2018 and 2020. The investigation revealed vague explanations of data use, sharing … Read more
Richard Horne, the head of the UK’s National Cyber Security Centre (NCSC), warned that the threats to the UK are wildly underestimated by both individuals and organisations. He stated that a sharp rise in severe cyber incidents, including attacks on healthcare, transportation, and other critical sectors, has become more frequent, sophisticated, and intense, as highlighted … Read more
Microsoft recently announced its intention to eliminate passwords for over a billion users worldwide, marking a pivotal shift toward secure, passwordless authentication. In light of this, businesses need to recognise the importance of modernising their security systems, as traditional passwords are no longer sufficient to combat evolving cyber threats. In 2024, password breaches surged by … Read more
When most of us think about cyberattacks, we imagine sudden, chaotic events; a Company’s systems crashing, customer data being stolen, or ransomware demanding payment overnight. However, some of the most effective cyber threats are conducted by stealth, operating in the shadows for months without detection. These forms of attacks are often motivated by more capable … Read more
The Claim In the recent news, chinese researchers claim to have used a D-Wave Advantage quantum computer to break specific encryption algorithms based on the Substitution-Permutation Network (SPN), a common structure in encryption. SPNs secure data by repeatedly substituting (replacing) and permuting (reordering) parts of it, and they are foundational to widely used encryption systems … Read more
In a recent significant cyberattack, over 2000 Palo Alto Network firewalls have been compromised by attackers exploiting two recently patched vulnerabilities. Palo Alto provides cybersecurity services to enterprises, government and service providers. According to UK based Shadow server Foundation the number of breaches in US and India on Palo Alto network firewalls were in the … Read more
CloudSEK cybersecurity experts have recently discovered a significant threat with AndroxGh0st malware, which has now integrated the Mozi botnet to target IoT and cloud-based services. This combination expands AndroxGh0st’s reach, making it a powerful tool for cybercriminals to compromise various devices and networks, including cloud platforms like AWS and TwilioSendGrid. By merging with Mozi’s capabilities, … Read more