Cyber Security
Defend the
frontier.
Digital Transformation, Security Consulting and Cyber Essentials certification for organisations that can't afford to be second.
Transformation
Digital Transformation
Modernise systems, processes and cloud platforms with security engineered in from day one – not bolted on after launch.
Certification
Cyber Essentials & Cyber Essentials Plus
Gap analysis, remediation and hands-on support through to certification – the UK government-backed baseline your customers and contracts expect.
Networks
Connectivity
Leased lines, SD-WAN, Wi-Fi, VoIP, Starlink and Working from Home – fast, resilient and secure connectivity for every site and every home worker, designed, delivered and managed end to end.
- Leased Lines
- SD-WAN
- Wi-Fi
- VoIP
- Starlink
- Working from Home
Offensive Security
Penetration Testing
Adversary-grade testing across web, infrastructure and cloud. We find the path before an attacker does.
Response
Incident Response
When an attack hits, we help you contain it, find out what happened and get back to business safely.
Governance
Risk, Compliance & vCISO
ISO 27001 and GDPR readiness, security policy and fractional security leadership at board level.
Threat Intelligence
Understand the adversary.
Stay ahead of them.
Continuous monitoring, threat hunting and tailored intelligence briefings that turn noise into decisive action.
- CVEs sighted in 7 days
- 98
- Sightings in 7 days
- 1,220
- Critical in the top 8
- 7
Vendors trending · last 7 days
- PHP Group200
- Linux138
- BeyondTrust84
- Palo Alto Networks63
- Cisco53
- 15/10/2026CVE-2026-99999 Linux9.3<1%
- 21/10/2026CVE-2026-109618 PHP Group · PHP9.2—
- 21/10/2026CVE-2026-109619 PHP Group · PHP9.2—
- 15/10/2026CVE-2026-102764 BeyondTrust · Remote Support9.31%
- 14/10/2026CVE-2026-0322 Palo Alto Networks · Cloud NGFW8.61%
- 14/10/2026CVE-2026-76519 Cisco · Cisco Secure Email9.82%
- 13/10/2026CVE-2026-97229 GitLab10.0<1%
- 14/10/2026CVE-2026-110447 Collabora · Collabora Online - Built-in CODE Server9.21%
Ranked by sightings in advisories, posts and code over the last 7 days · CVSS: severity score · EPSS: chance of exploitation in the next 30 days
Updated 22 Oct 2026, 00:21 UTC
Latest insights
All insights →Vulnerability advisoryExploited
BeyondTrust remote support flaw now has a public exploit:patch and check for compromise
Attackers exploited CVE-2026-102764 in BeyondTrust Remote Support as a zero-day from August. Rapid7 has now published a working Metasploit exploit. If you or your IT provider runs it, patch and check today.
Read the briefingVulnerability advisoryPublic exploit
WordPress Project Manager plugin lets anyone run code on your site, and exploit code is out
CVE-2026-116512 in the weDevs Project Manager plugin for WordPress, rated 9.8 out of 10, lets attackers run code without logging in. An exploit script went public on 1 November. Update to 4.1.2 now.
Read the briefingVulnerability advisoryExploited
WordPress flaw lets attackers run code during a core update, and they are already trying
WordPress 7.1.4 fixes CVE-2026-119977, which lets anyone run code on a site in the seconds it spends unpacking a core update. Wordfence saw attackers polling for it within minutes of its firewall rule. Check your version today.
Read the briefingVulnerability advisoryCritical
Gravity Forms flaw rated 9.8 now has public exploit code
CVE-2026-103039 in the Gravity Forms WordPress plugin lets anyone who can submit a form inject PHP objects, and in some setups run code. Exploit code went public on 31 October. Update to 3.1.3 or later.
Read the briefing
Our Mission
Make every organisation we protect harder to attack than it was yesterday.
Engage
Ready for
launch?
Tell us about your environment and objectives.