News
Page updated: 18 January 2025
This page consists of a “One Stop” for freely available information to help in your threat and vulnerability management tasks.
NCSC: Threat Reports
- The near-term impact of AI on the cyber threat
- The near-term impact of AI on the cyber threat
- Cyber Threat Report: UK Legal Sector
- The threat from commercial cyber proliferation
- ACD - The Sixth Year
- Threat Report 24th March 2023
- Threat Report 10th March 2023
- Threat Report 24th February 2023
- Threat Report 10th February 2023
- Threat Report 27th January 2023
- Threat Report 13th January 2023
- Threat Report 22nd December 2022
- Threat Report 9th December 2022
- Threat Report 25th November 2022
- Threat Report 11th November 2022
Tenable: Cyber Exposure Alerts
- CVE-2024-55591: Fortinet Authentication Bypass Zero-Day Vulnerability Exploited in the Wild
- Microsoft’s January 2025 Patch Tuesday Addresses 157 CVEs (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335)
- CVE-2025-0282: Ivanti Connect Secure Zero-Day Vulnerability Exploited In The Wild
- Microsoft Patch Tuesday 2024 Year in Review
- Microsoft’s December 2024 Patch Tuesday Addresses 70 CVEs (CVE-2024-49138)
- Volt Typhoon: U.S. Critical Infrastructure Targeted by State-Sponsored Actors
- CVE-2024-0012, CVE-2024-9474: Zero-Day Vulnerabilities in Palo Alto PAN-OS Exploited In The Wild
- Microsoft’s November 2024 Patch Tuesday Addresses 87 CVEs (CVE-2024-43451, CVE-2024-49039)
- CVE-2024-47575: Frequently Asked Questions About FortiJump Zero-Day in FortiManager and FortiManager Cloud
- From Bugs to Breaches: 25 Significant CVEs As MITRE CVE Turns 25
- Oracle October 2024 Critical Patch Update Addresses 198 CVEs
- Microsoft’s October 2024 Patch Tuesday Addresses 117 CVEs (CVE-2024-43572, CVE-2024-43573)
- CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Frequently Asked Questions About Common UNIX Printing System (CUPS) Vulnerabilities
- Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
- CVE-2021-20123, CVE-2021-20124: DrayTek Vulnerabilities Discovered by Tenable Research Added to CISA KEV
CISA: Cyber Threat Intelligence
- 2023 Top Routinely Exploited Vulnerabilities
- Microsoft Releases October 2024 Security Updates
- Iranian Cyber Actors’ Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations
- CISA Adds One Known Exploited Vulnerability to Catalog
- Russian Military Cyber Actors Target US and Global Critical Infrastructure
- #StopRansomware: RansomHub Ransomware
- Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
- Best Practices for Event Logging and Threat Detection
- CISA Adds Six Known Exploited Vulnerabilities to Catalog
- North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
- CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
- People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action
- #StopRansomware: Black Basta
- Delta Electronics CNCSoft-G2 DOPSoft DPAX
- #StopRansomware: Akira Ransomware
Our Services that can directly help, benefit, your organisation with mitigating the issues presented above
Cyber Risk Management
