News

Bridewell has been accepted as a full member of the Forum of Incident Response and Security Teams (FIRST), marking a significant milestone in the company’s incident response maturity and global collaboration capabilities. The UK-based cyber security services provider, which specialises in supporting critical national infrastructure (CNI) organisations, secured membership following a rigorous, peer-led vetting process and approval by the FIRST CSIRT Board of Directors. The achievement reflects Bridewell’s ability to meet the high operational and...

In early April, Anthropic announced the release of Claude Mythos Preview, its most advanced AI model to date. Though trained as a general-purpose large language model, Mythos quickly distinguished itself through a notable capacity for complex, multi-step cybersecurity work – autonomously parsing massive codebases, detecting critical-severity software defects and identifying vulnerabilities that have eluded human researchers for decades. Anthropic describes its cybersecurity capabilities as “substantially beyond those of any model we have previously trained,” including...

KnowBe4, the digital workforce security provider, securing both AI agents and humans, has announced new research, Phishing Threat Trends Report Volume Seven. The report finds a seismic shift in the attack vectors utilized to conduct phishing attacks, including touchpoints outside of traditional email communication such as calendar invitations and messaging tools. “The inbox is no longer the only front line for coordinated social engineering attacks,” said Jack Chapman, SVP of Threat Intelligence, KnowBe4. “Cybercriminals are...

The reported PocketOS incident, in which an AI agent deleted a live production database and its backups in a matter of seconds, has quickly become a defining moment in the conversation around autonomous systems in enterprise environments. An AI-powered coding or operations agent, operating with legitimate access via API tokens, encountered what it interpreted as a configuration or credential issue. It then took it upon itself to resolve the problem, issuing a destructive command that...

Forescout has unveiled an ambitious new global partner initiative, Mission:Possible, marking the largest channel-focused campaign in the company’s 25-year history. Designed to energize partners and accelerate pipeline growth, the tour will span more than 90 cities worldwide between May and September 2026. A Global Push to Strengthen the Channel The Mission:Possible tour underscores Forescout’s commitment to its partner ecosystem at a time when organizations are grappling with increasingly complex cybersecurity challenges. The initiative will bring...

At this week’s CyberUK conference in Glasgow, National Cyber Security Centre (NCSC) CEO Richard Horne delivered a stark assessment of the evolving cyber threat landscape, warning that organisations are facing a “perfect storm” driven by rapid advances in artificial intelligence and rising geopolitical tensions. In his keynote, Horne highlighted how emerging technologies are fundamentally reshaping cyber risk, with attackers now able to scale operations faster than ever before. Despite this acceleration, he stressed that many...

Bridewell has become one of the first organisations to achieve Level 2 Defence Cyber Certification (DCC), marking a significant milestone in efforts to strengthen cyber security across the UK defence supply chain. The Reading-based cyber security services provider is currently one of only two organisations accredited at this level, underscoring its role in supporting critical national infrastructure (CNI) and defence-sector organisations with robust security practices. The DCC scheme, developed by the UK Ministry of Defence...

Cybersecurity firm Forescout has identified 22 previously unknown vulnerabilities in serial-to-IP converters, devices commonly used to connect legacy industrial equipment to modern networks. The company warns that thousands of these systems are currently exposed online, potentially increasing the risk of cyberattacks across critical infrastructure sectors. The findings are part of a new research initiative called BRIDGE:BREAK, which focuses on hardware produced by Lantronix and Silex. These devices are widely deployed in industries such as utilities,...

Many companies cause a is a hit until there's a breach at some point in time. A suspicious email gets clicked, a system goes down at the worst possible time, or someone in IT notices unusual activity on a Friday afternoon. By that time, the damage is possibly done, and the efforts to contain those types of situations are costly, adds stress to company employees, and can damage your company’s reputation. Working with a security...

Application security firm Black Duck has appointed Dom Glavach as its new Chief Information Security Officer, bringing in a seasoned executive with more than two decades of experience spanning enterprise security, national defence, and SaaS environments. The hire comes at a turbulent time for software security. Dependency abuse, credential misuse, and compromised build pipelines have triggered a wave of supply chain breaches affecting developer tools, cloud platforms, and AI-driven systems, and organisations are struggling to...