How to check whether your organisation is exposed to the APT28 router campaign In April, the NCSC published an advisory describing a sustained DNS hijacking…
Most security problems are about attackers doing something now. This one is partly about attackers waiting. The move to post-quantum cryptography is driven by a…
Not every router attack is about stealing from the person behind the router. Some are about using it. Volt Typhoon, a Chinese state-sponsored group, spent…
The 2023 attack on MGM Resorts is often called sophisticated. In one sense it was: it ended in ransomware, days of disruption and an estimated…
An employee did the careful thing. Unsure about an unusual payment request, they asked to confirm it on a video call with senior colleagues, including…
Update: If you’re here because of the March 2026 FCC ruling on foreign-made routers, we’ve also produced a short briefing note covering what changed, what…