Security Weekly
Cybersecurity insights for small businesses and SaaS teams — grounded in real (anonymised) data from Hebrides Cyber scans.
4 September 2026
Cyber Security Brief — 2026-09-04
Today's brief: French hospital fined €500,000 after breach exposes data of 727,000, plus more from the last few days.
3 September 2026
Cyber Security Brief — 2026-09-03
Today's brief: Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon, plus more from the last few days.
2 September 2026
Cyber Security Brief — 2026-09-02
Today's brief: SonicWall warns of actively exploited SMA1000 zero-day flaws, plus more from the last few days.
1 September 2026
Cyber Security Brief — 2026-09-01
Today's brief: Cronos blockchain restarts after $74 million Tectonic exploit, plus more from the last few days.
31 August 2026
This Week in Small Business Security — 2026-08-31
This week: FulcrumSec claims Manchester Airports hack, theft of 86 GB of data, plus 0 sites scanned and what we found.
31 August 2026
Cyber Security Brief — 2026-08-31
Today's brief: FulcrumSec claims Manchester Airports hack, theft of 86 GB of data, plus more from the last few days.
30 August 2026
Cyber Security Brief — 2026-08-30
Today's brief: Anthropic is cutting Claude Code's current weekly limits by 17%, plus more from the last few days.
29 August 2026
Cyber Security Brief — 2026-08-29
Today's brief: McKesson discloses breach after ShinyHunters claims patient data theft, plus more from the last few days.
28 August 2026
Cyber Security Brief — 2026-08-28
Today's brief: Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable, plus more from the last few days.
26 August 2026
Cyber Security Brief — 2026-08-26
Today's brief: INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown, plus more from the last few days.
25 August 2026
Cyber Security Brief — 2026-08-25
Today's brief: Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data, plus more from the last few days.
24 August 2026
This Week in Small Business Security — 2026-08-24
This week: UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit, plus 3 sites scanned and what we found.
24 August 2026
Cyber Security Brief — 2026-08-24
Today's brief: UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit, plus more from the last few days.
23 August 2026
Cyber Security Brief — 2026-08-23
Today's brief: TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit, plus more from the last few days.
22 August 2026
Cyber Security Brief — 2026-08-22
Today's brief: TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit, plus more from the last few days.
18 August 2026
This Week in Small Business Security — 2026-08-18
11 sites scanned this week. Top issue: No DMARC record — phishing using your domain is possible.
10 August 2026
CRPx0 Ransomware Hits Hyundai Turkey: Why Recruitment Data Is a Bigger Target Than You Think
A late-July 2026 attack on Hyundai Motor Türkiye's recruitment systems shows why HR and hiring data deserves the same protection as financial records.
3 August 2026
323 UK Firms Hit by Ransomware in a Year — More Than Half Were SMEs
City of London Police data shows small and medium businesses now bear the brunt of UK ransomware attacks, with average losses up 50% year on year.
27 July 2026
One Leaked Credential From 2022, ~200 Companies Breached: The Klue Supply-Chain Lesson
Market research vendor Klue was breached using a credential issued for a 2022 pilot — and the fallout hit customers including HackerOne, LastPass, and Jamf.
20 July 2026
62.2 Million Records: The Conduent Breach and Why "We're Just a Vendor" Isn't a Defence
Conduent's breach became the third-largest in US healthcare history after its confirmed victim count nearly tripled — a reminder that vendors carry the same breach obligations as the businesses they serve.
13 July 2026
Charter Communications: Tens of Millions of Records Stolen and Published — What Extortion-Only Attacks Mean for You
No ransomware, no encryption — just theft and a public leak site. Charter's May 2026 breach shows attackers increasingly skip encryption entirely.
6 July 2026
Multi-Factor Authentication: The Best Free Security Upgrade for a Small Business
Stolen and reused passwords power a huge share of the account breaches in this list. A free authenticator app closes that door in about five minutes.
29 June 2026
Five HTTP Headers Every Small Business Website Should Set (And None of Them Cost Anything)
Missing security headers are the single most common finding in our Security Score scans. Here's what each one does and how to add them.