Russian hacktivist attacks against the UK
This blog analyses 2026, examining how pro-Russian hacktivist groups targeted UK government, financial, and transport organisations in response to geopolitical support for Ukraine.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Why Vendor Fatigue is the Silent Threat to Mid-Market Companies
Vendor fatigue doesn’t happen overnight. It builds slowly until one day you realize your security stack has become a security problem. The good news? You don’t have to live with it.
Using LLMs, CVSS, and SIEM Data for Runtime Risk Prioritization
A recent University of North Carolina Wilmington study tested whether general-purpose large language models could infer CVSS v3.1 base metrics using only CVE description text, across more than 31,000 vulnerabilities. The results show measurable progress, but they also expose a hard limit that matters far more than model selection: Model quality helps, but missing context sets a ceiling on reliability.
GitGuardian Closes 2025 with Strong Enterprise Momentum, Protecting Millions of Developers Worldwide
Leading secrets security platform sees accelerated adoption across Fortune 500, with 60% of new customers choosing multi-year commitments.
Building Cyber Resilience Beyond Defence - Chris Hallenbeck, CISO at Tanium
In this interview with iTnews, Chris Hallenbeck, CISO at Tanium, discusses the critical shift from traditional cyber defence to proactive resilience. He highlights why organisations must prepare for inevitable incidents through proactive visibility, rapid response, and muscle-memory preparedness, emphasising that resilience isn’t about preventing every breach, but minimising impact and ensuring business continuity.
Building Trust and Autonomy in the Age of Agentic AI - Saqib Khan, Global Field CIO at Tanium
Speaking with iTnews, Saqib Khan, Global Field CIO at Tanium, explores how real-time, trustworthy endpoint data forms the foundation of Agentic AI. He explains why confidence in data sources is key to enabling autonomous decision-making, reducing incidents, and driving faster, more reliable outcomes across IT and cybersecurity environments.
Why Visibility & Agility Define Enterprise Resilience - Erik Gaston (Tanium)
In this interview with iTnews, Erik Gaston, Vice President of Global Executive Engagement at Tanium, highlights why enterprise resilience today depends on visibility, speed, and alignment between technology and business outcomes. He explains how organisations can stay proactive amid evolving threats, emphasising that in the digital era, "slow is the new down".
How to Design a Practical UZTNA Policy Framework
Can one policy rule all access systems? Explore Universal ZTNA implementation stages and discover what's actually achievable.
Sensitive Data Is the Common Thread Across Most OWASP Top 10 Issues. Here's Why
The OWASP Top 10 is usually presented as a list of technical failures. Broken access control. Injection. Insecure design. Misconfiguration. Each category points to something that went wrong in the application. What it doesn’t say explicitly is what was actually at risk when it went wrong. In most real incidents, the answer is not “the application.” It’s the data inside it. Sensitive data is the reason attackers care about OWASP failures in the first place. Credentials.
CrowdStrike to Acquire Seraphic to Secure Work in Any Browser
I’m delighted to announce CrowdStrike’s intent to acquire Seraphic, the leader in browser runtime security. With this acquisition, we will extend the power of the CrowdStrike Falcon platform into the browser to enforce security within sessions across any browser, on any device. The browser is already the operating system of the enterprise workforce, connecting apps, data, and identity.