Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Securing Shadow AI: 6 Principles from Security Leaders Who've Been There

Everyone's racing to use AI right now. But securing AI adoption while maintaining productivity—getting visibility into shadow AI, educating employees without blocking innovation, and building governance that actually works—is harder than it looks. We recently hosted a discussion between Anant Mahajan, Head of Product at Nightfall, and Yunique Demann, VP of Information Security at TPx, to dig into the practical realities of AI governance.

FreePBX Authentication Bypass Leading to SQL Injection and RCE (CVE-2025-57819)

A new critical vulnerability has been identified in FreePBX, the widely adopted open-source, web-based graphical user interface for managing Asterisk PBX systems. Tracked as CVE-2025-57819, this flaw affects FreePBX versions 15, 16, and 17 and enables unauthenticated attackers to bypass administrator login controls. Once inside, threat actors can perform SQL Injection attacks that lead directly to remote code execution (RCE).

Secure More with Less: Achieving Cost Avoidance in Government with Keeper's Unified Platform

Government agencies are under increasing pressure to reduce operational costs while strengthening their defenses against costly cyber threats. Legacy systems and disjointed security tools lead to growing complexity, inefficiencies and higher expenses. Keeper Security offers a unified cybersecurity platform that eliminates the need for legacy Privileged Access Management (PAM) solutions, traditional password management, endpoint privilege management, remote access tools and secrets management.

Bridging the Gap Between IT and OT Cybersecurity in the Middle East's Critical Infrastructure

As the Middle East rapidly accelerates its digital transformation across sectors like energy, oil and gas, and manufacturing, the traditional gap between IT and OT cyber security is closing. Industrial operators now rely on interconnected systems to maximize efficiency, but this increasing convergence introduces new vulnerabilities that cannot be addressed in isolation.

Rounding up the best UK penetration testing providers

Picking "the best" pen testing partner depends on your systems, risk appetite, and evidence needs. This list focuses on UK providers with recognised assurance, proven technical depth, and clear reporting. We have prioritised CREST membership and, where relevant, NCSC CHECK status, because these are the fastest filters for competence in the UK public and regulated sectors. You will still want to run a proper scope, ask for a sample report, and meet the actual testers, but this short list will give you a strong head start.

How AI Contract Solutions Reduce Risk and Cost

With how businesses operate nowadays, managing contracts is a vital aspect of company operations. Minor errors can cost you a lot of money and land you in legal trouble. Artificial intelligence provides a unique approach to enhancing contract management, reducing risk exposure, and reducing compliance costs.

How to Choose the Right Server for Your Project: A Beginner's Guide to Hosting, Hardware, and Future Growth

You've built something worth sharing: a shop, a SaaS idea, a multiplayer game mode, an internal dashboard. Now you're staring at a wall of options-VPS, dedicated, colocation, cloud, serverless-and a soup of acronyms-CPU, ECC, NVMe, RAID, RTO, PCIe. This guide walks you through the decision like a calm, experienced teammate. We'll translate jargon, give you a repeatable process, and outline a path that works today and scales tomorrow.

Cloud ERP and Cybersecurity: A Winning Tag Team for Data Resilience

Businesses today operate in a climate where data is both their greatest asset and their greatest vulnerability. From customer records to financial information, every digital file carries weight. That's why the need for strong cybersecurity strategies has never been more pressing. At the same time, companies are also leaning on systems that improve efficiency and adaptability. One of the solutions that bridges both needs is cloud-based ERP.
Featured Post

Mitigating the Impact of Data Breaches with Cyber Insurance and Incident Response

Cyber attacks are no longer a question of if but when. As cybercriminal tactics evolve at pace, organisations face an ever-growing risk from ransomware, data breaches, and operational disruption. The financial, regulatory, and reputational consequences of these incidents can be severe - particularly for small and medium-sized enterprises (SMEs) that may underestimate their exposure.

Breaking the Passkey Promise: SquareX Discloses Major Passkey Vulnerability at DEF CON 33

It is no secret that passwords are highly susceptible to phishing and brute force attacks. This led to the mass adoption of passkeys, a passwordless authentication method leveraging cryptographic key pairs that allows users to log in with biometrics or a hardware key. According to FIDO, over 15 billion accounts have been passkey-enabled, with 69% of users globally enabling passkeys in at least one account. The passkey promise is simple - eliminate passwords, eliminate vulnerabilities.