News

UK cybersecurity specialist WorkNest Secure has achieved Accredited Organisation status under The Cyber Scheme, providing further independent recognition of the technical expertise and professional standards maintained across its services. The accreditation recognises organisations that demonstrate professional competence, quality and alignment with established cybersecurity industry standards. It also places particular emphasis on the qualifications and capabilities of the professionals delivering those services. For WorkNest Secure, the latest recognition builds on its existing technical accreditations and reflects...

UK-based secure data exchange specialist DOQEX has achieved Cyber Essentials certification, adding another recognised security standard to its existing portfolio of accreditations. The York-based company, which specialises in protecting sensitive information shared between organisations, already holds ISO 27001, ISO 27017 and ISO 27018 certifications. The latest achievement reflects its continued focus on maintaining strong security controls and protecting customer information. Cyber Essentials is a UK Government-backed scheme designed to help businesses defend themselves against common...

Cybersecurity researchers at Forescout are drawing attention to the risks posed by exposed refrigeration control systems, warning that weaknesses in operational technology (OT) could have serious consequences for food supplies, business continuity and other temperature-sensitive operations. The warning comes following cyberattacks against French supermarkets in October 2026, which reportedly disrupted refrigeration systems at hundreds of stores. Attackers were able to interfere with cooling operations, resulting in temperature fluctuations, spoiled stock and significant disruption. The incidents...

The best cybersecurity thought leadership agencies help organisations turn expert insight into credible executive content, original research and influential industry commentary. For technical, practitioner-led thought leadership: Bora combines cybersecurity content expertise with a team that includes former security practitioners. For research-led programmes: CyberEdge Group and 10Fold offer examples of turning cybersecurity data into substantial reports and media stories. For audience intelligence and search visibility: CyberTheory focuses on understanding security decision-makers, while Content Visit and First...

Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns, alongside new delivery techniques associated with malware loaders linked to Vice Society ransomware activity. The findings, published in two research blogs, examine what happens after victims fall for ClickFix lures. These attacks trick users into copying and running malicious commands, often under the pretence of fixing a technical problem or completing a verification step. The investigations reveal how attackers...

Huntress researchers have uncovered an SEO-poisoning campaign that harvests SSL VPN credentials through a lookalike WatchGuard download page, then hands victims the real, validly signed installer from WatchGuard’s own CDN, leaving endpoint tools with nothing to detect. The activity, detailed by the Huntress SOC on 13 October, centres on watchguard-vpnnet, a lookalike domain posing as a download page for WatchGuard’s Mobile VPN with SSL client. Unlike earlier waves of the campaign, which relied on trojanised...

Certes has received Frost & Sullivan’s 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC), following an independent evaluation of vendors in the market. The recognition centres on a problem most security teams are now facing: migrating embedded cryptography across legacy applications, cloud environments and critical infrastructure will take years, but “harvest now, decrypt later” attacks mean data intercepted today could be exposed once sufficiently powerful quantum computers arrive. Frost & Sullivan notes that...

Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys an organisation uses to access its AI providers. LiteLLM is downloaded around 97 million times a month and has more than...

By Louise John, Head of IT Service Delivery at Virgin Active For IT managers, unexpected projects and changing business priorities are normal part of the job. You might have spent months planning your team's workload, but only to be told with little warning that a new software solution needs to be implemented within six weeks. Whatever the circumstances, the responsibility for delivering these projects often falls on IT teams, even when they have had little...

Ahead of their participation at DTX + UCX London 2026, Lee Robson, AWS Greenfield Practice Lead at Ingram Micro shares what the company will be showcasing at the event and explains what trends will impact the channel in the year ahead. How is Ingram Micro participating in DTX + UCX 2026? Ingram Micro will be showcasing how organisations can accelerate innovation with AWS. Our team will be demonstrating practical AI, cloud and security solutions, including...