Cyber Security
Defend the
frontier.
Digital Transformation, Security Consulting and Cyber Essentials certification for organisations that can't afford to be second.
Transformation
Digital Transformation
Modernise systems, processes and cloud platforms with security engineered in from day one – not bolted on after launch.
Certification
Cyber Essentials & Cyber Essentials Plus
Gap analysis, remediation and hands-on support through to certification – the UK government-backed baseline your customers and contracts expect.
Networks
Connectivity
Leased lines, SD-WAN, Wi-Fi, VoIP, Starlink and Working from Home – fast, resilient and secure connectivity for every site and every home worker, designed, delivered and managed end to end.
- Leased Lines
- SD-WAN
- Wi-Fi
- VoIP
- Starlink
- Working from Home
Offensive Security
Penetration Testing
Adversary-grade testing across web, infrastructure and cloud. We find the path before an attacker does.
Response
Incident Response
When an attack hits, we help you contain it, find out what happened and get back to business safely.
Governance
Risk, Compliance & vCISO
ISO 27001 and GDPR readiness, security policy and fractional security leadership at board level.
Threat Intelligence
Understand the adversary.
Stay ahead of them.
Continuous monitoring, threat hunting and tailored intelligence briefings that turn noise into decisive action.
- CVEs sighted in 7 days
- 98
- Sightings in 7 days
- 1,220
- Critical in the top 8
- 7
Vendors trending · last 7 days
- PHP Group200
- Linux138
- BeyondTrust84
- Palo Alto Networks63
- Cisco53
- 15/10/2026CVE-2026-99999 Linux9.3<1%
- 21/10/2026CVE-2026-109618 PHP Group · PHP9.2—
- 21/10/2026CVE-2026-109619 PHP Group · PHP9.2—
- 15/10/2026CVE-2026-102764 BeyondTrust · Remote Support9.31%
- 14/10/2026CVE-2026-0322 Palo Alto Networks · Cloud NGFW8.61%
- 14/10/2026CVE-2026-76519 Cisco · Cisco Secure Email9.82%
- 13/10/2026CVE-2026-97229 GitLab10.0<1%
- 14/10/2026CVE-2026-110447 Collabora · Collabora Online - Built-in CODE Server9.21%
Ranked by sightings in advisories, posts and code over the last 7 days · CVSS: severity score · EPSS: chance of exploitation in the next 30 days
Updated 22 Oct 2026, 00:21 UTC
Latest insights
All insights →Vulnerability advisoryExploited
SonicWall firewalls:attackers are getting round SAML MFA on the SSL VPN
CVE-2026-19868 lets someone with a valid password skip SAML sign-in, and its MFA, on SonicWall SSL VPN. CISA says it is being exploited. Update Gen7 to 7.3.4-7013 or Gen8 to 8.2.3-8015 now.
Read the briefingVulnerability advisoryPublic exploit
Barracuda Email Security Gateway:public exploit chain gives attackers root
Two Barracuda ESG flaws, CVE-2026-116606 and CVE-2026-111560, chain to root without a login, and exploit code is public. Check the patches are on and keep the admin page off the internet.
Read the briefingVulnerability advisoryExploited
WooCommerce Wholesale Lead Capture:attackers are trying to make themselves admin
CVE-2026-27542 in the Wholesale Lead Capture plugin for WooCommerce, rated 9.8, needs no login, and exploitation attempts were reported on 5 November. Update to 2.0.3.2 or later.
Read the briefingVulnerability advisoryExploited
Zyxel GS1900 switches:June’s fix did not stop the exploit attackers were using
The exploit used to break into Zyxel GS1900 switches still worked on the firmware patched in June. The real hole, CVE-2026-107441, is fixed in 2.90 Patch 3. Update and change the admin password.
Read the briefing
Our Mission
Make every organisation we protect harder to attack than it was yesterday.
Engage
Ready for
launch?
Tell us about your environment and objectives.