Cyber Security 

Share

Latest news on cyber security (also cybersecurity, tech security, computer security, IT security, information technology security and infosec), covering cyberattacks, data breaches, data theft, data leaks, hacking, hackers, ransomware, malware, phishing, spyware, zero-day exploits, software vulnerabilities, security flaws, critical patches, Patch Tuesday, CVE advisories, infostealers, botnets, DDoS attacks, antivirus, passwords, passkeys and unauthorised access.

Cyber security is the practice of protecting systems, networks, programs and data from digital attacks. It spans network, cloud, endpoint, mobile and information security, along with identity and access management and penetration testing. One breach can expose millions of records, halt a hospital or disrupt a whole supply chain. Governments set rules and give guidance, from the UK's National Cyber Security Centre (NCSC) and America's CISA to EU laws such as the NIS2 Directive.

Attackers keep changing tactics. Ransomware gangs encrypt and steal data, while infostealers and credential stuffing exploit reused passwords. Phishing, spear phishing, smishing and vishing trick staff, and ClickFix scams persuade victims to run malicious commands themselves. Backdoors, rootkits, trojans, worms, keyloggers, adware, malvertising and brute force attacks remain common, as does the hijacking of accounts and devices.

Many of the biggest incidents begin with a software flaw: a zero-day exploit strikes before a patch exists, and a supply chain attack compromises trusted software. In December 2021 the Log4Shell vulnerability, rated 10 out of 10 for severity, put systems using a widely deployed Java logging library at risk, and in 2023 the Clop group exploited a flaw in the MOVEit file-transfer software to steal data from hundreds of organisations. Microsoft releases fixes on Patch Tuesday, the second Tuesday of each month, while CISA keeps a catalogue of vulnerabilities known to be exploited. In October 2026 two critical flaws in PHP, which runs a large share of the web, forced emergency patches and left some websites offline.

Defenders respond with patches, software updates, multi-factor authentication, passkeys, zero trust models and biometric log-ins such as fingerprint and facial recognition. Antivirus vendors including Avast, AVG, Avira, Bitdefender, ESET, Kaspersky, McAfee, Norton, Panda, Symantec, Trend Micro, Webroot, ZoneAlarm, Bullguard, Lavasoft, Secunia and Windows Defender compete on protection and reviews. Debates continue over encryption, surveillance, privacy, ransom payments and who is responsible when software fails. Organisations are also planning for AI-enabled attacks and a future move to post-quantum cryptography.

Behind every breach are people: patients whose care is delayed, customers whose details leak, small firms hit by fraud and security teams working under pressure. State-linked Advanced Persistent Threats (APTs), cybercriminal groups and hacktivists all shape the threat picture. The Morris worm of 1988 spread across the early internet and led to emergency response teams, and the UK passed the Computer Misuse Act in 1990. The WannaCry ransomware outbreak of 2017 disrupted organisations worldwide, including NHS hospitals, and the 2020 SolarWinds compromise showed how supply chain attacks can reach thousands of customers.

Staying informed is the best first defence. Our NewsNow cyber security feed gathers the latest headlines on hacks, data breaches, ransomware, vulnerabilities, security flaws, malware, phishing and antivirus news from reliable sources worldwide, so you always have a comprehensive, up-to-date view.