Michael Rack

In this week’s cyber news roundup 📰🔒 https://lnkd.in/eJvrDVKX 🚗💻 Hackers linked to M&S breach claim responsibility for Jaguar Land Rover cyber-attack ☁️🔐 Workiva hit in Salesforce-linked data breach 🤖⚡ Hackers weaponise HexStrike-AI to exploit Citrix flaws 🌐🛡️ Cloudflare blocks record-breaking 11.5 Tbps DDoS attack 💰🇧🇷 Hackers attempt $130m theft via Brazil’s Pix system 👉 Read these stories and more on our website at Integrity360.com

2

The National Cyber Security Centre (NCSC) is urging UK organisations to take immediate action against a vulnerability impacting Microsoft SharePoint Server products. Microsoft has issued a security advisory highlighting a vulnerability that allows attackers to remotely execute arbitrary code through the deserialisation of untrusted data. Notably, CVE-2025-53771 enables this exploit to occur while bypassing authentication. Both Microsoft and the NCSC have confirmed the existence of an exploit in the wild, with active attacks targeting on-premises SharePoint Server customers, including some in the UK. **Affected Products:** - Microsoft SharePoint Server Subscription Edition - Microsoft SharePoint Server 2019 - Microsoft SharePoint Server 2016 **Recommended Actions:** The NCSC advises following vendor best practices to mitigate these vulnerabilities. Microsoft has released security updates that fully protect users of SharePoint Subscription Edition, SharePoint 2019, and SharePoint 2016 against CVE-2025-53770 and CVE-2025-53771. It is crucial to apply these updates immediately to ensure your installations are secure. For more details, click here: https://lnkd.in/gywzhvhj #CyberSecurity #MicrosoftSharePoint #VulnerabilityManagement #NCSC

4

Vulnerability Notice - Cisco, SAP, Apache We strongly recommend reviewing the advisory if you use any of the products from these organisations. Read more here https://lnkd.in/efdwa_cU

3

MDR sharpens visibility. Because resilient businesses need a clearer lens. In today’s cyber landscape, what you don’t see often matters more than what you do. Modern security teams face an overload of alerts. MDR steps in to give clarity where it matters most: - Filters noise so only real threats demand attention - Adds context to alerts for faster understanding - Guides action with expert-driven recommendations - Accelerates decisions when time is critical - Strengthens resilience by spotting what tools alone may miss MDR makes your defenses sharper, faster and more reliable. Graftronics is a Sophos MDR partner, transforming IT teams across organizations in multiple industries. Reach out to us for assessing MDR for your setup. - Vimesh Avlani Managed Detection & Response | Cyber Resilience | Trusted by Mid-Market CXOs

20

4 Comments

Don’t miss XBOW AI Researcher Brendan Dolan-Gavitt's conversation with Graham Cluley on the Smashing Security podcast. Brendan and Graham discuss: ° Details of some of the vulnerabilities XBOW has uncovered ° Where AI is strong for pentesting, where it needs more support ° How vulnerability discovery and disclosure will change with AI in the mix ° And more Listen here: https://bit.ly/42SYK7R

11

Cyber Essentials: Strengthening Everyday Security The UK Government and GCHQ’s National Cyber Security Centre (NCSC) continue to promote Cyber Essentials and Cyber Essentials Plus as key frameworks for protecting organisations against common cyber threats. These certifications focus on the fundamentals: firewalls, secure configuration, access control, malware protection and patch management, helping businesses build trust and resilience. At Databox 360, we support SMEs in achieving compliance and strengthening their defences in line with government-backed cybersecurity standards. Cyber resilience starts with the essentials. #CyberEssentials #CyberSecurity #NCSC #GCHQ #Compliance #DataProtection #Databox360

9

NCSC reports active exploitation in the UK of CVE-2025-53770 affecting Microsoft SharePoint Server. Prompt remediation is advised: apply vendor updates and restrict exposure of SharePoint services while monitoring for signs of compromise. Detection should include hunts for webshell artefacts on front-end servers. Our Incident Response and offensive security teams are ready to assist with rapid triage, containment, and validation of fixes through controlled exploitation. Targeted Red Team and Pen Test exercises can verify whether compensating controls prevent exploitation paths. https://lnkd.in/gywzhvhj #IncidentResponse #RedTeam #PenTesting #NCSC #MicrosoftSharePoint #CVE202553770

2

📰 In this week’s cyber news roundup https://lnkd.in/eF4Zfkt9 🚗 Jaguar Land Rover cyber attack set to become UK’s costliest at £1.9bn 🐉 Chinese threat groups exploit Microsoft SharePoint zero-day 🕵️‍♂️ Iranian threat group MuddyWater targets MENA governments with Phoenix backdoor 💶 Experian Netherlands fined €2.7m for GDPR breaches 💻 Hackers exploit Adobe Commerce ‘SessionReaper’ flaw in mass attacks 🔗 Read these stories and more on our website: Integrity360.com

3

Offshore doesn’t mean lower standards There’s a misconception that offshore SOCs compromise security. It doesn’t have to be true. We operate an offshore SOC aligned with: UK security standards ISO 27001 expectations SOC 2 evidence requirements #soc #offshoresoc #cybersecurity

18

1 Comment

#CyberAlert | Foundations for OT cyber security We have joined international partners to release guidance for owners and operators on foundations for operational technology cyber security and asset inventory. Read it here: https://lnkd.in/esEEhNFc

55

3 Comments

Most cyber attacks don’t start with sophisticated techniques — they start with something simple that’s been missed. Join our free webinar on 16 April at 2pm for a walkthrough of what we’re actually finding during real penetration tests across UK businesses in 2026 — not theory, not frameworks, but real vulnerabilities that attackers are exploiting today. What you'll learn: → The top 5 vulnerabilities we’re consistently uncovering → How attackers turn small issues into full system compromise → Why “old” vulnerabilities like SQL injection are making a comeback → The growing impact of AI-driven phishing and human-layer attacks → Where traditional security approaches are falling short If you’re responsible for IT, security or risk, this session will give you a clear view of where businesses are most exposed right now — and what to do about it. 🔗 Register now https://lnkd.in/eHgsEn3t

12

What are the main reasons someone would use an MSSP? 🤔 I work with a number of clients that outsource some or all of their security to an MSSP and I always like to understand why they decided to go down that route. Some of the most regular responses I get are: 💰 Cost - the number 1 reason I hear is that it costs less to work with an MSSP than it would be build out internal teams. Some clients have hybrid teams (internal & MSSP) and find it more cost-effective to outsource certain aspects of security. ⏲ Quicker solutions - By working with an MSSP many of these companies feel they have faster access to an adequate level of security. 🧠 Extensive knowledge - By working with an MSSP, certain companies can get access to Cyber Security expertise they may not have internally. What are the main reasons you think companies work with MSSPs?

16

14 Comments

In this week’s cyber news roundup https://lnkd.in/efSQ9pBn UK plans ransomware payment ban for public sector SharePoint zero-day breach hits 400+ organisations Breach of US Nuclear agency highlights growing fallout from SharePoint zero-day attacks APT41 targets African IT firm in cyber-espionage expansion Swiss healthcare provider AMEOS hit by data breach Read these stories and more on our website at Integrity360.com #CyberSecurity #ThreatIntel #DataBreach #ZeroDay #InfoSec #Integrity360

1

In this week’s cyber news roundup https://lnkd.in/efSQ9pBn UK plans ransomware payment ban for public sector SharePoint zero-day breach hits 400+ organisations Breach of US Nuclear agency highlights growing fallout from SharePoint zero-day attacks APT41 targets African IT firm in cyber-espionage expansion Swiss healthcare provider AMEOS hit by data breach Read these stories and more on our website at Integrity360.com #CyberSecurity #ThreatIntel #DataBreach #ZeroDay #InfoSec #Integrity360

9

Ransomware doesn’t start with encryption. It starts with access. By the time you see a ransom note....it’s already too late. This blog outlines a 5-step proactive defence plan to stop attacks early. 👉 Read more: https://lnkd.in/dJhWYHaF #Ransomware #CyberSecurityIreland #BusinessContinuity

6

🚨 Threat Intelligence Spotlight: Business Email Compromise We're seeing an increase in reports across Scotland involving Business Email Compromise (BEC) and impersonation attempts. This week alone, an organisation reported a phishing email containing a fake invoice, impersonating a director within the business. These attempts are becoming more convincing and more targeted. Common features we're seeing include: 🔵 Fake invoices referencing real senior staff. 🔵 Spoofed or lookalike email domains. 🔵 Urgency around payment requests. 🔵 Requests to change bank details. BEC is not sophisticated, but it works when processes fail. If your team handles invoicing or supplier payments, now is the time to: ✔️ Reinforce payment verification processes. ✔️ Double-check bank detail changes. ✔️ Remind staff to pause and verify unusual requests. You can read our practical guidance on Business Email Compromise here - https://lnkd.in/eqdB5UNf If you experience a suspected incident, call Police Scotland on 101 and our free Incident Support Helpline on 0800 1670 623 to speak with our specialist team.

15

1 Comment