News

Attackers are exploiting two newly disclosed vulnerabilities in AhsayCBS, the management console for Ahsay’s cloud backup software, to take over servers and quietly run cryptocurrency miners, according to researchers at Huntress. AhsayCBS (Cloud Backup Server) is mainly used by managed service providers (MSPs) and system integrators to create users and manage backup policies for their clients. As of 8 October, Huntress had seen five organisations targeted via the flaws. From disclosure to exploitation in three...

WorkNest Secure has achieved CREST Simulated Targeted Attack & Response for Financial Services (STAR-FS) accreditation, recognising its ability to deliver intelligence-led red teaming assessments for organisations operating in high-risk and regulated environments. The accreditation confirms that WorkNest Secure meets CREST's standards for conducting threat-led penetration testing, using realistic attack scenarios to assess how effectively organisations can prevent, detect and respond to sophisticated cyber threats. Developed in collaboration with the Bank of England, Prudential Regulation Authority...

Organisations worldwide faced an average of 2,803 cyber attacks per week in September 2026, up 16% on August and 48% on the same month last year, according to new data from Check Point Research. The figures point to sustained growth rather than a one-off spike. Weekly attacks per organisation have climbed 36% in five months, from 2,055 in May. UK organisations faced an average of 1,920 attacks per week, a 50% increase year on year....

Incident responders rarely get to watch an attack from the beginning. More often, security tooling arrives after the damage is done, either as part of the response or because a rollout was still underway when the attackers struck. That was the position Huntress found itself in this September, when its agent was deployed at an organisation that had already been hit by Akira ransomware. A post-compromise install means the EDR telemetry that would normally show...

Executives may be more relaxed about handing IT decisions to AI than the managers who answer to them, according to new research from TeamViewer. The study found that 46% of middle managers want a human involved when AI resolves IT issues that could affect security, data or business operations. Among executive leaders, the figure falls to 24%. The gap suggests that those closest to day-to-day AI-driven work want more oversight than the leaders setting AI...

ASOS customers were alarmed Tuesday morning after the retailer’s own mobile app sent a push notification claiming the company had been hacked and threatening to leak data unless it opened negotiations with the attackers. The notification, titled “ASOS HACKED” and sent out at around 10am BST on Tuesday, was addressed not to shoppers but to the company itself. It read: “Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us,...

Customer identity and access management (CIAM) provider FusionAuth has established its first dedicated European sales team, based in the UK, as enterprises across the region push for tighter control over where identity data lives and how it is isolated. The Colorado-based company said its European annual recurring revenue (ARR) has grown 72% over the past two years and now accounts for more than 30% of company ARR. That growth came before FusionAuth had any staff...

Personal details belonging to around 8.8 million people have been exposed in a breach of Denmark’s Central Person Register (CPR), after unauthorised parties abused a Danish company’s legitimate access to the national civil registration system, authorities confirmed on Monday. According to the Ministry of Research, Education and Digitalisation, the compromised information includes names, addresses and CPR numbers, along with other data held in the register. Minister Christina Egelund called it “a deeply serious incident” and...

Huntress has signed a pan-European distribution partnership with ALSO, giving value-added resellers (VARs) and managed service providers (MSPs) in 31 countries a new route to its Agentic Security Platform. The cybersecurity company, which protects more than 270,000 businesses, said the move will strengthen its growing EMEA channel ecosystem. For security teams and the service providers that support smaller organisations, the significance lies in what the platform bundles. Huntress combines layered protection across endpoints, identities, logs,...

Security operations centres are facing a two-sided problem. Attackers are increasingly automating their campaigns, while inside the business, AI agents and autonomous workflows are multiplying faster than most security teams can track. Exabeam's answer, unveiled on October 1, is a broad set of updates designed to let AI take on more of the investigative legwork without removing human analysts from the decisions that matter. The Broomfield, Colorado-based company, best known for pioneering user and entity...