Cyber Security
Defend the
frontier.
Digital Transformation, Security Consulting and Cyber Essentials certification for organisations that can't afford to be second.
Transformation
Digital Transformation
Modernise systems, processes and cloud platforms with security engineered in from day one – not bolted on after launch.
Certification
Cyber Essentials & Cyber Essentials Plus
Gap analysis, remediation and hands-on support through to certification – the UK government-backed baseline your customers and contracts expect.
Networks
Connectivity
Leased lines, SD-WAN, Wi-Fi, VoIP, Starlink and Working from Home – fast, resilient and secure connectivity for every site and every home worker, designed, delivered and managed end to end.
- Leased Lines
- SD-WAN
- Wi-Fi
- VoIP
- Starlink
- Working from Home
Offensive Security
Penetration Testing
Adversary-grade testing across web, infrastructure and cloud. We find the path before an attacker does.
Response
Incident Response
When an attack hits, we help you contain it, find out what happened and get back to business safely.
Governance
Risk, Compliance & vCISO
ISO 27001 and GDPR readiness, security policy and fractional security leadership at board level.
Threat Intelligence
Understand the adversary.
Stay ahead of them.
Continuous monitoring, threat hunting and tailored intelligence briefings that turn noise into decisive action.
- CVEs sighted in 7 days
- 98
- Sightings in 7 days
- 1,220
- Critical in the top 8
- 7
Vendors trending · last 7 days
- PHP Group200
- Linux138
- BeyondTrust84
- Palo Alto Networks63
- Cisco53
- 15/10/2026CVE-2026-99999 Linux9.3<1%
- 21/10/2026CVE-2026-109618 PHP Group · PHP9.2—
- 21/10/2026CVE-2026-109619 PHP Group · PHP9.2—
- 15/10/2026CVE-2026-102764 BeyondTrust · Remote Support9.31%
- 14/10/2026CVE-2026-0322 Palo Alto Networks · Cloud NGFW8.61%
- 14/10/2026CVE-2026-76519 Cisco · Cisco Secure Email9.82%
- 13/10/2026CVE-2026-97229 GitLab10.0<1%
- 14/10/2026CVE-2026-110447 Collabora · Collabora Online - Built-in CODE Server9.21%
Ranked by sightings in advisories, posts and code over the last 7 days · CVSS: severity score · EPSS: chance of exploitation in the next 30 days
Updated 22 Oct 2026, 00:21 UTC
Latest insights
All insights →Vulnerability advisoryCritical
Cracked eMudhra CA keys let anyone forge HTTPS certificates
Eight eMudhra intermediate CA private keys were so weak anyone could recover them, and more than 100,000 forged certificates have already been logged. Browsers block them; Java, Electron apps, Python and Go need updates. What is affected and what to update.
Read the briefingVulnerability advisoryExploited
VeloCloud SD-WAN orchestrator flaw under attack
Arista says attackers are exploiting CVE-2026-114625 in on-premises VeloCloud Orchestrator, the console that runs VeloCloud SD-WAN. Any logged-in user, even read-only, can become a superuser. Who is exposed and what to ask your provider.
Read the briefingVulnerability advisoryCritical
GitLab perfect-10 flaw:exploit code is out
CVE-2026-110264 in self-managed GitLab CE/EE, rated 10.0, could let an attacker run code on the server without logging in. Proof-of-concept code was on GitHub within a day of the fix. Which versions to update to and what to check.
Read the briefingVulnerability advisoryExploited
Nextcloud built-in Collabora flaw under attack
Attackers are using CVE-2026-110447 in Nextcloud's Collabora Online Built-in CODE Server to plant web shells without logging in. CISA added it to its exploited list on 23 October. What to check and update.
Read the briefing
Our Mission
Make every organisation we protect harder to attack than it was yesterday.
Engage
Ready for
launch?
Tell us about your environment and objectives.