Two critical remote code execution (RCE) vulnerabilities in PHP, collectively referred to as “php2shell,” have been disclosed with confirmed proof-of-concept (POC) exploitation in the wild. A working exploit demonstrates that an unauthenticated attacker can execute arbitrary code prior to any web application execution.
Read more
A Technical Post-Mortem of Attack Progression, Detection Failures, and Lessons Learned
Read more
If your IT disappeared tomorrow, could you still pay staff, serve customers and ship orders? In October 2025 the NCSC’s chief executive asked every UK business leader what they would do “if your IT infrastructure was crippled tomorrow and all your screens went blank” (NCSC Annual Review 2025 launch). For most small and medium-sized businesses, the honest answer is “we don’t know”.
Read more
As details emerge about OpenAI agents compromising an Australian national health database, one truth becomes undeniable: LLM-based agentic cyberattacks are no longer theoretical – they are here.
Read more
Modern Phreaking Has Evolved Far beyond Illicit International Calls and Toll Fraud. Today, Improperly Segmented IP Private Branch Exchange (IP-PBX) systems and unhardened VoIP endpoints serve as high-value initial access vectors into corporate subnets.
Read more
From 2600 Hz to SIP Trunks – Phreaking the Modern Enterprise VoIP Engine. The Evolution of Telecom Exploitation. In 1971, phone phreaking was an analogue craft. A plastic whistle from a Cap’n Crunch cereal box emitting a precise 2600 Hz tone could trick AT&T’s multi-frequency (MF) switches into dropping trunk lines and granting access to operator modes for free long-distance calls. Today, as the UK reaches the final stages of the national PSTN switch-off led by Openreach, corporate telecom infrastructure has fully converged onto IP networks.
Read more
Long before network packets and port scans, the global telecommunications infrastructure was explored, mapped, and manipulated using pure audio frequencies, analogue tone generators, and plastic toy whistles. Here is how phone “phreaks” exploited in-band signalling—and laid the architectural groundwork for modern security engineering.
Read more
For years, the standard answer to phishing was an annual slide deck and a poster reminding staff to check for bad grammar and dodgy links. That training still has its place, but it was built for a threat that has largely moved on.
Read more
Security programmes are still largely built to keep external attackers out, but a significant share of incidents now originate inside the organisation. An internal breach can hit a business of any size, and most of the time it isn’t the work of a malicious insider at all.
Read more
ClickFix is a social engineering attack technique that tricks users into manually executing malicious code on their devices by masquerading as routine browser verification checks. Reliance Cyber Security Operations Centre (SOC) and Incident Response team have identified an evolution in tactics being employed, utilising living-off-the-land-binaries and scripts (LOLBAS), command line obfuscation and WebDAV network share mapping for data exfiltration.
Read more