Cyber Security
Defend the
frontier.
Digital Transformation, Security Consulting and Cyber Essentials certification for organisations that can't afford to be second.
Transformation
Digital Transformation
Modernise systems, processes and cloud platforms with security engineered in from day one – not bolted on after launch.
Certification
Cyber Essentials & Cyber Essentials Plus
Gap analysis, remediation and hands-on support through to certification – the UK government-backed baseline your customers and contracts expect.
Networks
Connectivity
Leased lines, SD-WAN, Wi-Fi, VoIP, Starlink and Working from Home – fast, resilient and secure connectivity for every site and every home worker, designed, delivered and managed end to end.
- Leased Lines
- SD-WAN
- Wi-Fi
- VoIP
- Starlink
- Working from Home
Offensive Security
Penetration Testing
Adversary-grade testing across web, infrastructure and cloud. We find the path before an attacker does.
Response
Incident Response
When an attack hits, we help you contain it, find out what happened and get back to business safely.
Governance
Risk, Compliance & vCISO
ISO 27001 and GDPR readiness, security policy and fractional security leadership at board level.
Threat Intelligence
Understand the adversary.
Stay ahead of them.
Continuous monitoring, threat hunting and tailored intelligence briefings that turn noise into decisive action.
- CVEs sighted in 7 days
- 98
- Sightings in 7 days
- 1,220
- Critical in the top 8
- 7
Vendors trending · last 7 days
- PHP Group200
- Linux138
- BeyondTrust84
- Palo Alto Networks63
- Cisco53
- 15/10/2026CVE-2026-99999 Linux9.3<1%
- 21/10/2026CVE-2026-109618 PHP Group · PHP9.2—
- 21/10/2026CVE-2026-109619 PHP Group · PHP9.2—
- 15/10/2026CVE-2026-102764 BeyondTrust · Remote Support9.31%
- 14/10/2026CVE-2026-0322 Palo Alto Networks · Cloud NGFW8.61%
- 14/10/2026CVE-2026-76519 Cisco · Cisco Secure Email9.82%
- 13/10/2026CVE-2026-97229 GitLab10.0<1%
- 14/10/2026CVE-2026-110447 Collabora · Collabora Online - Built-in CODE Server9.21%
Ranked by sightings in advisories, posts and code over the last 7 days · CVSS: severity score · EPSS: chance of exploitation in the next 30 days
Updated 22 Oct 2026, 00:21 UTC
Latest insights
All insights →Vulnerability advisoryPublic exploit
s2Member WordPress plugin flaw lets attackers run code via PayPal payment messages, and exploit code is out
CVE-2026-86596 in the s2Member membership plugin for WordPress, rated 9.8 out of 10, can let an attacker run code on your site through a PayPal payment notification. Exploit code went public on 2 November. Update to 261017.
Read the briefingVulnerability advisoryPublic exploit
Cost Calculator Builder PRO flaw lets anyone run code on your WordPress site, and exploit code is out
CVE-2026-14900 in Cost Calculator Builder PRO for WordPress, rated 9.8 out of 10, lets attackers run code without logging in. A working exploit script went public on 2 November. Update to 4.0.4 or later.
Read the briefingVulnerability advisoryPublic exploit
WooCommerce Product Filter by WBW has a SQL injection anyone can reach, and scanners now check for it
CVE-2026-112866 in Product Filter by WBW, a WooCommerce plugin on 50,000+ sites, lets attackers inject SQL without logging in. Public test code is out and a scanner template landed on 3 November. Update to 3.4.8.
Read the briefingVulnerability advisoryExploited
BeyondTrust remote support flaw now has a public exploit:patch and check for compromise
Attackers exploited CVE-2026-102764 in BeyondTrust Remote Support as a zero-day from August. Rapid7 has now published a working Metasploit exploit. If you or your IT provider runs it, patch and check today.
Read the briefing
Our Mission
Make every organisation we protect harder to attack than it was yesterday.
Engage
Ready for
launch?
Tell us about your environment and objectives.