Cyber Security
Defend the
frontier.
Digital Transformation, Security Consulting and Cyber Essentials certification for organisations that can't afford to be second.
Transformation
Digital Transformation
Modernise systems, processes and cloud platforms with security engineered in from day one – not bolted on after launch.
Certification
Cyber Essentials & Cyber Essentials Plus
Gap analysis, remediation and hands-on support through to certification – the UK government-backed baseline your customers and contracts expect.
Networks
Connectivity
Leased lines, SD-WAN, Wi-Fi, VoIP, Starlink and Working from Home – fast, resilient and secure connectivity for every site and every home worker, designed, delivered and managed end to end.
- Leased Lines
- SD-WAN
- Wi-Fi
- VoIP
- Starlink
- Working from Home
Offensive Security
Penetration Testing
Adversary-grade testing across web, infrastructure and cloud. We find the path before an attacker does.
Response
Incident Response
When an attack hits, we help you contain it, find out what happened and get back to business safely.
Governance
Risk, Compliance & vCISO
ISO 27001 and GDPR readiness, security policy and fractional security leadership at board level.
Threat Intelligence
Understand the adversary.
Stay ahead of them.
Continuous monitoring, threat hunting and tailored intelligence briefings that turn noise into decisive action.
- CVEs sighted in 7 days
- 98
- Sightings in 7 days
- 1,220
- Critical in the top 8
- 7
Vendors trending · last 7 days
- PHP Group200
- Linux138
- BeyondTrust84
- Palo Alto Networks63
- Cisco53
- 15/10/2026CVE-2026-99999 Linux9.3<1%
- 21/10/2026CVE-2026-109618 PHP Group · PHP9.2—
- 21/10/2026CVE-2026-109619 PHP Group · PHP9.2—
- 15/10/2026CVE-2026-102764 BeyondTrust · Remote Support9.31%
- 14/10/2026CVE-2026-0322 Palo Alto Networks · Cloud NGFW8.61%
- 14/10/2026CVE-2026-76519 Cisco · Cisco Secure Email9.82%
- 13/10/2026CVE-2026-97229 GitLab10.0<1%
- 14/10/2026CVE-2026-110447 Collabora · Collabora Online - Built-in CODE Server9.21%
Ranked by sightings in advisories, posts and code over the last 7 days · CVSS: severity score · EPSS: chance of exploitation in the next 30 days
Updated 22 Oct 2026, 00:21 UTC
Latest insights
All insights →Vulnerability advisoryExploited
VMware ESX and vCenter:a second flaw from VMSA-2026-0006 is now exploited
CISA has added CVE-2026-41709, which lets an ESX administrator act without being logged, to its exploited list. A critical vCenter flaw from the same July advisory has been exploited since August, including by ransomware. What to patch and check.
Read the briefingVulnerability advisoryExploited
Fragnesia:Linux root flaw used with PHP2Shell, now on CISA exploited list
CISA has added Fragnesia, CVE-2026-46300, a Linux kernel flaw that turns any local foothold into root, to its exploited list. Attackers chained it with PHP2Shell to root 25 firewalls. What to patch and how to mitigate.
Read the briefingVulnerability advisoryCritical
YOOtheme Pro flaw lets attackers take over websites without logging in
CVE-2026-102785 in the YOOtheme Pro website builder, rated 10 out of 10, lets anyone plant a webshell through a public image link. Exploit code is public and exploitation attempts are reported. Update to 5.0.53 now.
Read the briefingVulnerability advisoryExploited
Magento PolyShell flaw now on CISA exploited list
CISA has added PolyShell, CVE-2026-48356 in Magento Open Source and Adobe Commerce, to its Known Exploited Vulnerabilities catalog. Attackers have used it since March to plant webshells and malicious scripts on online stores. What to patch and check.
Read the briefing
Our Mission
Make every organisation we protect harder to attack than it was yesterday.
Engage
Ready for
launch?
Tell us about your environment and objectives.