We help businesses protect their most prized assets with our following service lines: ✔️ Technical risk advisory ✔️ Penetration testing/ethical hacking ✔️ Managed security services ✔️ Data privacy/GDPR ✔️ IT Security compliance #cybersecurity #pentesting #informationsecurity

PHP2Shell: What to know about two critical PHP flaws

Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of PHP, the expected severity of the flaw (CVSS @sans_isc

ETSI Proposes 17 Cybersecurity Standards to Support Cyber Resilience Act The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act @InfosecurityMag

CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security 𝗦𝗹𝗲𝗲𝗽 𝘀𝗼𝘂𝗻𝗱𝗹𝘆. 𝗪𝗲'𝘃𝗲 𝗴𝗼𝘁 𝘆𝗼𝘂𝗿 𝗯𝗮𝗰𝗸.

Post-quantum updates to our TLS guidance

US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny 𝗣𝗿𝗼𝘁𝗲𝗰𝘁 𝘄𝗵𝗮𝘁 𝗺𝗮𝘁𝘁𝗲𝗿𝘀. 𝗩𝗶𝘀𝗶𝘁 𝗼𝘂𝗿 𝘄𝗲𝗯𝘀𝗶𝘁𝗲.

Enterprises should report AI breaches and ‘near misses,’ says UK financial regulator 𝗗𝗼𝗻'𝘁 𝘄𝗮𝗶𝘁 𝗳𝗼𝗿 𝗮 𝗯𝗿𝗲𝗮𝗰𝗵. 𝗔𝗰𝘁 𝗻𝗼𝘄.

Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation @InfosecurityMag

Help the NCSC understand how organisations approach external attack surface risk

Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance @crowdstrike

Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) I believe the cybersecurity industry may be approaching AI security the wrong way. @sans_isc

China-linked malicious actors called out by UK and international partners for targeting sensitive data globally

Panchan's Mining Island [Guest Diary], (Wed, Oct 14th) [This is a Guest Diary by Zachary Norwood, an ISC intern as part of the BACS program] @sans_isc

MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

CISA, FBI and Partners Warn Organizations of SafePay Ransomware Actors Targeting Multiple Critical Infrastructure Sectors 𝗦𝗹𝗲𝗲𝗽 𝘀𝗼𝘂𝗻𝗱𝗹𝘆. 𝗪𝗲'𝘃𝗲 𝗴𝗼𝘁 𝘆𝗼𝘂𝗿 𝗯𝗮𝗰𝗸.

ISC Stormcast For Wednesday, October 14th, 2026 (Wed, Oct 14th) @sans_isc

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.   CVE-2026-85046 Google Chromium V8 Type Confusion Vulnerability This type of @CISACyber

Widespread PHP Flaw May Cause Many Site Outages Today

Is the ad a scam? How to tell before you click