Alerts
Critical PHP vulnerability: are you affected?
Critical PHP vulnerabilities could put websites and software at risk. Find out what happened, what to check and how to protect your software supply chain.
Security insight for the people who build and run.
News, analysis and practical guidance on software security for UK businesses. We cover the breaches in the headlines, the supply-chain risks behind them and what you can do about it, in plain English.
All articles
11 articles
Alerts
GhostAction: lessons from 30,000 targeted repos
More than 30,000 GitHub repositories were targeted by GhostAction. Discover what it reveals about source code, secrets and software supply-chain security.
News
Why a cyberattack never stops with one business
When we picture a cyberattack, we often imagine a single company dealing with locked computers, stolen data or a website that has gone offline.
Updates
The NCSC warning on software dependencies
Your software relies on more than your own code. Learn why the NCSC is warning businesses to check their software dependencies.
News
Manchester Airport cyber attack: what to learn
The Manchester Airport cyber attack affected millions of customers. What can UK organisations learn from the breach and reduce their cyber risk?
Product
Why annual penetration tests are no longer enough
For many organisations, an annual penetration test has become a box-ticking exercise. The problem is that software doesn’t stand still for twelve months anymore.
News
UK cyber security statistics: what they mean
Read about the latest UK cyber security statistics, the cost of cyber attacks and what they mean for UK businesses.
News
What UK businesses can learn from the M&S attack
What can UK businesses learn from the M&S cyber attack? We look at the impact, cyber resilience and the importance of finding vulnerabilities early.
Updates
Why security debt is the new technical debt
The shortcuts taken to meet deadlines, the legacy code nobody wants to touch, the features that “work for now”. Why security debt builds up the same way, and costs more.
Updates
The biggest cyber risk isn’t AI. It’s blind trust
Artificial intelligence has changed software development at an incredible pace. Here’s where the real security risk sits.
Product
Security isn’t a once-a-year penetration test
For many organisations, cybersecurity follows a familiar pattern: one test a year, a report, a few fixes. Here’s why that rhythm leaves gaps.
Wondering what's exposed in your own code?
Run a free Hacka scan and get a prioritised report of vulnerabilities, risky dependencies and exposed secrets, with the fixes.