Articles on vulnerability management: practical cyber security and technology leadership insights for UK SMEs, written by James Griffiths.
In October 2025, one of the most significant supply-chain-adjacent cybersecurity incidents in recent years came to light: the Seattle-based network security and application-delivery firm F5 admitted that a “highly sophisticated nation-state threat actor” had achieved long-term unauthorised access to
In the fast-evolving world of cybersecurity, one principle remains constant: you can’t defend what you don’t understand. Cyber attackers continuously adapt their methods, refine their tools, and exploit new vulnerabilities often before businesses are even aware of them. This is where threat intellig
In every cyber security circle, one term has steadily moved from being niche jargon to a central part of strategic discussions in boardrooms and security operations centres alike: Attack Surface Management (ASM). At its heart, ASM is about visibility and control. It answers the questions: What does
Introduction On 20 August 2025, Apple quietly rolled out emergency security patches for iOS, iPadOS and macOS. These updates iOS 18.6.2, iPadOS 18.6.2 (plus 17.7.10 for some older pads), macOS Sequoia 15.6.1, Sonoma 14.7.8 and Ventura 13.7.8 don’t include flashy new features. Instead, they fix a ser
August 2025 has proven to be a critical month for cyber‑security, with several zero-day vulnerabilities disclosed and actively exploited across major platforms and software. Here’s a concise overview of the most significant cases and what they mean for users and organisations. 1. Windows Kerberos Ze
In the fast-evolving cyber threat landscape, attackers are using increasingly sophisticated tactics to slip past traditional defences. Two terms have become central to modern security discussions HEAT (Highly Evasive Adaptive Threats) and CEM (Continuous Exposure Management). While HEAT describes th
Release Date: 12 August 2025 Applicable Version: Windows 11 version 24H2 Build Number: 10.0.26100.4946 (OS Build) Patch ID: KB5063878 1. Context and Significance Every second Tuesday of the month, Microsoft delivers its highly anticipated Patch Tuesday updates. In August 2025, this rollout encompass
Introduction It’s early August 2025. WinRAR, one of the world’s most ubiquitous file‑compression tools, has just stumbled into the limelight not for its compression efficiency, but for a critical security flaw. A zero‑day vulnerability, officially registered as CVE‑2025‑8088, has been weaponised in
Executive summary Fortinet has disclosed and patched a critical OS command injection vulnerability in FortiSIEM, tracked as CVE-2025-25256. It scores CVSS 9.8 (critical) and can be exploited without authentication or user interaction via specially crafted CLI requests against a FortiSIEM service. Fo
Introduction On 9 August 2025, The Hacker News broke a critical cybersecurity story: researchers at Cisco Talos disclosed a series of severe vulnerabilities in Dell’s ControlVault 3 firmware and associated Windows APIs, affecting over 100 laptop models. They dubbed these flaws ReVault a name that co
In a stark reminder of the growing cybersecurity challenges facing the automotive sector, researchers have disclosed a newly discovered set of vulnerabilities, collectively dubbed PerfektBlue which impact millions of vehicles manufactured by some of the world’s most prominent car brands, including M
In the cybersecurity world, where trust and competence are paramount, the CREST certification scheme for organisations serves as a vital benchmark. Recognised globally, CREST (Council of Registered Ethical Security Testers) accredits organisations that deliver high-quality, technically competent, an