Insights
Real incidents, plain English — what each one means for small businesses. Priority reads first.
Attackers broke into the company behind one of the most popular WordPress backup plugins, took connection keys for its remote management service, and used those keys to plant backdoors on customer sites. Nobody needed to guess your password…
Read article →A forgotten test account let criminals into a Welsh data organisation and take information about 3,300 people, mostly children. The regulator reprimanded both the organisation and its IT provider. The password got…
Read article →Microsoft accidentally deleted some charities’ Microsoft 365 data and says it can’t get it back. Here’s what happened, and the simple 3-2-1 rule that keeps your data safe.
Read article →Two critical flaws in PHP, the language behind WordPress and much of the web, could let an attacker take over a web server without logging in. Governments took their own sites offline rather than risk it. For most…
Read article →ConnectWise has switched off its Cloud Backup service, formerly SkyKick, after someone used the backup app’s own Microsoft 365 identity to get into customer tenants. Here’s what’s confirmed, what isn’t, how to check…
Read article →A day after emergency PHP patches landed, 32 UK government services were offline as a precaution, the NCSC called the situation “unprecedented”, and a Chepstow garage was back to pen and paper for MOT…
Read article →A security incident at one contractor has stopped every federal bankruptcy court in the US from sending its official notices since 9 October. Here’s what’s confirmed, what isn’t, and how to work out which of your own…
Read article →An NHS trust has now dismissed 15 staff for looking, without a legitimate reason, at the medical records of people killed in the Nottingham attacks. Their families have been caused further distress. The lesson for…
Read article →Japanese media group Nikkei says someone used stolen login details to get into a cloud service it uses for system development, and took about 1.83 million items of personal information. Here’s what’s confirmed, what…
Read article →A week after ransomware hit Japan’s IDCF Cloud, its operator says backup data can be retrieved for 194 of the 495 affected customers. That’s good news for some, but it shows the real test of a backup: can you…
Read article →On 13 October, the Housing Ombudsman Service said a security incident at a third-party supplier had hit its case management system. On the same day, several other UK complaints bodies lost their online services too.…
Read article →On 12 October, the group behind Albert Heijn and Delhaize said it had taken some of its own systems offline to contain a security issue, while its shops stayed open. Here’s what we know so far, and how a small…
Read article →Overnight on 11 October, attackers reached the refrigeration controls in hundreds of French supermarkets and forced them into a non-stop defrost. Here’s what we know so far, and the simple steps that stop the…
Read article →Criminals got into ASOS by tricking one member of staff, then walked off with detailed profiles of its customers. Here’s what we know so far, and the simple habits and settings that stop the same trick working on…
Read article →Ransomware has knocked out part of a major Japanese cloud platform, and its operator says some customers can only get their data back from their own backups. Here’s what happened, and how to make sure your recovery…
Read article →