Research

Forescout Vedere Labs research has uncovered 15 previously unknown vulnerabilities affecting TP-Link's Omada Zero-Touch Provisioning (ZTP) ecosystem, warning that weaknesses in automated device deployment could allow attackers to compromise not just individual devices, but the management infrastructure responsible for entire networks. The research highlights an emerging security challenge as organisations increasingly rely on Zero-Touch Provisioning to simplify the deployment and management of routers, switches, gateways and wireless access points across distributed environments. While ZTP reduces...

The Forescout 2026 H1 Threat Review found that more than 37,000 vulnerabilities were published during the first six months of the year, representing a 51% increase year on year. More than half were classified as high or critical severity, while ransomware attack claims rose by 25% to 4,544 incidents, averaging 25 attacks every day. The report, published by Forescout Research – Vedere Labs, analysed more than 37,000 vulnerabilities, over 1,000 tracked threat actors and thousands...

Certes has released new research showing that many organizations remain unprepared for the security risks posed by quantum computing, despite growing awareness of the threat. According to the company’s Emerging PQC Imperative report, 78% of organizations believe legacy systems represent their biggest quantum security risk. The findings highlight growing concerns that outdated infrastructure and applications could leave sensitive data exposed as quantum computing capabilities advance. The study, conducted by Freeform Dynamics and commissioned by Certes,...

Cybersecurity firm Forescout has identified 22 previously unknown vulnerabilities in serial-to-IP converters, devices commonly used to connect legacy industrial equipment to modern networks. The company warns that thousands of these systems are currently exposed online, potentially increasing the risk of cyberattacks across critical infrastructure sectors. The findings are part of a new research initiative called BRIDGE:BREAK, which focuses on hardware produced by Lantronix and Silex. These devices are widely deployed in industries such as utilities,...

A new study by Specops Software explores the resilience of SHA256, a commonly used cryptographic hashing algorithm, against modern password-cracking techniques. The findings emphasize the algorithm’s effectiveness in protecting data, especially when combined with strong, complex passwords. However, the research also highlights vulnerabilities when using short or simple passwords, even with this robust technology. SHA256, renowned for its collision resistance and speed, is widely implemented in areas like blockchain, digital certificates, and password storage. However,...

The majority of large enterprises spend an average of 3-5 months integrating and training teams on each new security solution - at the expense of threat hunting, vulnerability scanning and security awareness training  However, major contradictions are rife, with 76% believing more tools equate to better security  Attitudes to cybersecurity within the UK's largest organisations are highly contradictory and risk exacerbating existing risks, stress, and inefficiency, new research from SenseOn has today revealed. The research...

Today, Keeper Security have announced the release of the Keeper Security Parental Practices Report: Conversations on Cybersecurity, which explores parental attitudes, practices and concerns regarding cybersecurity discussions with their children and sheds light on this imperative topic for families. The report found that one in three (30%) of parents admitted that they have never spoken to their children about cybersecurity.  Additionally, over 40% of parents who admitted that they didn't know how to create strong...

Comparitech recently conducted research into exactly this, looking at the top 100 stadiums in world football around the world, to figure out which football fans are the most watched. They have collated the number of cameras found in each stadium, focusing on the number of cameras recording the public in and around the grounds but excluding those that record and stream matches on television. Football matches are always closely monitored, whether it be the World...

Today, Armis released new research identifying the riskiest connected assets posing threats to global businesses. The company's findings highlight risk being introduced to organisations through a variety of connected assets across device classes, emphasising a need for a comprehensive security strategy to protect an organisation’s entire attack surface in real-time. “Continuing to educate global businesses about the evolving and increased risk being introduced to their attack surface through managed and unmanaged assets is a key mission...

Between 2018 and 2023, 478 manufacturing companies have suffered a ransomware attack, leading to a loss of approximately $46.2 billion in downtime alone. Serious cyber incidents affecting manufacturing companies can lead to significant disruptions to production lines. As a result, customer orders can be left unfulfilled and day-to-day operations come to a standstill. Comparitech recently analysed how widespread these types of attacks on the manufacturing sector are to find out their true cost. Using their...