Patching Stories

UK Stories

Patching stories

Iran-linked cyber attack on UK power plant was inevitable

A four-day shutdown at a UK energy site has intensified warnings that ageing infrastructure leaves critical national systems exposed to wider disruption.

By Sofiah Nichole Salivio • 5 min read • Yesterday

Global Stories

Patching stories

Data Science

FIRST launches VulnOptiCON 2026 in Luxembourg on AI

Rising disclosure volumes are forcing security teams to predict which flaws attackers will exploit as FIRST broadens its vulnerability conference in Luxembourg.

By Sofiah Nichole Salivio • 4 min read • Yesterday

Malware

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • Yesterday

Network Security

Public exploit code targets Cudy router flaw chain

Patching is urgent for Cudy WR3000 rev 2.0 routers, as public code shows how two flaws can let attackers gain root command execution.

By Sean Mitchell • 5 min read • Yesterday

Data Protection

TrendAI adopts Claude Opus 5 for vulnerability triage

Security teams could cut exposure faster as the model helps rank exploitable flaws and apply temporary defences before vendor fixes arrive.

By Sean Mitchell • 4 min read • 2 days ago

Digital Transformation

Barracuda finds average web app has 20 security flaws

Basic security lapses are leaving web apps exposed, with Barracuda saying routine misconfigurations account for most of 20 flaws per site.

By Sean Mitchell • 3 min read • Last week

Network Security

Cudy router flaws could allow root command execution

Owners of certain Cudy WR3000 routers face a root takeover risk unless they update firmware to patch two chained flaws.

By Sean Mitchell • 5 min read • Last week

Data Protection

Mid-market firms account for 73% of ransomware victims

Ransomware groups are keeping up pressure on smaller rivals, with mid-market firms still making up 73% of victims across North America and Europe.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Virtual Private Networks

Clop-linked web shell hits Windchill in new exploit

Manufacturers face credential theft and engineering-data loss after a tailored Windchill web shell tied to Clop exploited CVE-2026-12569.

By Sean Mitchell • 4 min read • Last week

Ransomware

Rapid7 says exploits are emerging faster than patches

Defenders face a shrinking window to act, after Rapid7 found 62% of newly exploited flaws could be attacked without authentication or user interaction.

By Sean Mitchell • 3 min read • Last week

Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last week

Firewalls

Network segmentation - you can't attack what you can't see

Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.

By Anthony Caruana • 5 min read • This month

Network Infrastructure

Australia & New Zealand face surge in critical flaws

Patch backlogs are leaving organisations exposed, with 85 high-impact flaws flagged across Australia and New Zealand, up 44% in July.

By Joseph Gabriel Lagonsin • 4 min read • This month

Malware

AI-driven cybercrime surges at scale, Flashpoint warns

Stolen credentials and AI-generated phishing are accelerating attacks, as Flashpoint tracked 22 million illicit discussions and 7.4 million infected hosts.

By Joseph Gabriel Lagonsin • 5 min read • This month

Security Operations Centres

NIST seeks input to modernise vulnerability database

Security teams could gain more useful risk signals as NIST weighs changes to the National Vulnerability Database amid surging flaw volumes and AI use.

By Sean Mitchell • 5 min read • This month