A few weeks ago, we said that we'd be publishing the first phase of our...

New research shows how an old vulnerability called ROBOT can be exploited using...

Component-driven risk assessments are the most mature and common types of assessment within the...

Risk information is any information which can influence a decision. Some organisations have a tendency to...

The NCSC's risk management guidance is aimed at a broad range of organisations,...

Microsoft patched 34 vulnerabilities in all on Tuesday with most of the bugs...

HP released an update that fixes debugger code that could allow an attacker...

All but the very simplest software is likely to contain bugs, some of...

Testing during software development is well recognised as good practice. It helps you...

There is sometimes a perceived conflict between security and usability. This situation is...

Creating code that is capable of withstanding attack requires an understanding of attack...

Using a free tool called Spinner, researchers identified certificate pinning vulnerabilities in mobile...

TeamViewer says it has issued a hotfix to address a bug that allows...

Researchers have found a variant of Ursnif Trojan they said is a “v3...

If you missed the earlier blogs and don't know what CyBOK is -...