Davey Winder

Millions of website admins are being urged to patch their PHP installs today as more than half of all sites could be vulnerable to critical new security flaws.

Google has confirmed attackers hijacked legitimate Google domains using fraudulent security certificates. However, the company said Google itself has not been hacked.

The latest SectopRAT variant comes hidden within “tampered legitimate software that steals credentials and enables remote system control”.

Cisco has confirmed a vulnerability that could allow a remote attacker to run arbitrary commands with root privileges on the OS

Google has confirmed that, with immediate effect, it has increased the Chrome security update cycle in response to concerns about AI vulnerability discoveries.

Pre-orders for the new Apple iPhone 18 Pro and Pro Max begin on Saturday, September 12. Now fraud experts warn that scammers are already trying to take your money.

Are you doing enough to support your security team's mental health as patch counts continue to escalate dramatically?

Microsoft has patched 973 vulnerabilities, including actively exploited Windows CVE-2026-85880 and CVE-2026-81963 bugs. How should your organization respond to stay safe?

As Google confirms a bumper round of 230 Chrome security vulnerabilities, including 5 critical ones, there’s no need to panic — or do anything but sit back and wait.

Users of the Plex streaming platform have been told to update both the media server and desktop as soon as possible “to address a number of security issues.”

Up to 5,000 Dropbox users have received emails notifying them that their accounts were compromised by attackers in August

The US Cybersecurity and Infrastructure Security Agency (CISA) has released two pieces of guidance for orgs facing the "patch apocalypse"

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

The Chrome browser memory vulnerabilities just keep on coming. Now Google has released two security updates in 48 hours to fix three such critical bugs.

Our security expert reveals the lessons to learn from the Pokemon data breach that has affected thousands of customers in the UK and Germany

Customers of the Pokemon Center in the UK and Germany have been warned to take care after confirmation that order data was leaked following a supply chain breach.

Meta has announced it is to roll out a new optional feature that leverages an on-device AI machine-learning model to help detect and prevent WhatsApp scam attacks.

Signal has added an automatic key verification (AKV) feature to help combat ‘Person-in-the-Middle’ attacks, but it isn't without problems

Microsoft has released a patch for a Windows use-after-free zero-day vulnerability already being exploited to deploy malware used by the Lazarus hacking group.