Analysis, Commentary & Case Studies
-
10 JUL 2026
NCSC's Cyber Essentials Pathways Pilot Wasn't Built for SMEs — But Two of Its Findings Are
NCSC's Cyber Essentials Pathways pilot is aimed at large, complex organisations proving alternative controls — not SMEs. But its evidence-over-self-attestation finding and its AI/patching warning land directly on the standard certification route too.
-
19 MAY 2026
FCA, Bank of England and Treasury Issue Joint Warning on Frontier AI Cyber Risk
A joint statement warns regulated firms that frontier AI is amplifying cyber threats at speed and scale — and GET-IT's own audit data shows exactly the gap they're pointing at.
-
CASE STUDY
The NHS WannaCry Crisis: When IT Became an A&E Emergency
How the 2017 WannaCry ransomware attack paralysed the NHS, cancelled 19,000 appointments, and exposed the cost of poor cyber hygiene.
-
CASE STUDY
The $250,000 "Evil Twin" Fraud
How a single character swap in an email domain cost a UK mortgage firm $250,000 — a forensic breakdown of Business Email Compromise.
Active UK Advisories
Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
Read NCSC Advisory →Artificial intelligence and cyber intrusion
Read NCSC Advisory →From industry concern to practical action: the value of working with regulators
Read NCSC Advisory →Critical security issue affecting PHP
Read NCSC Advisory →Introducing a new AI chapter in the NCSC research problem book
Read NCSC Advisory →Using TLS to protect data
Read NCSC Advisory →Known Exploited Vulnerabilities — Active in the Wild
SonicWall SonicOS SSLVPN Vulnerability
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
View CISA Advisory → CVE-2024-27834 — Apple | Multiple ProductsApple Multiple Products Vulnerability
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
View CISA Advisory → CVE-2026-119977 — WordPress | WordPress CoreWordPress WordPress Core Vulnerability
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
View CISA Advisory → CVE-2026-118527 — Ivanti | Connect SecureIvanti Connect Secure Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
View CISA Advisory → CVE-2026-111357 — Ivanti | Connect SecureIvanti Connect Secure Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
View CISA Advisory → CVE-2026-97229 — GitLab | Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Vulnerability
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.
View CISA Advisory →Financial Fraud Warnings & Action Fraud Alerts
FCA to explore quantum computing to tackle financial crime
A new initiative will bring together firms, quantum technology providers, and national research labs to explore practical applications of quantum computing. The FCA will bring together financial services firms, quantum...
Read FCA Warning →Act now to be resilient in the quantum future
Quantum computing will bring significant opportunities to the UK financial sector, but firms need to act now to prepare for a world where a viable hostile quantum computer could break today’s widely used cryptography sta...
Read FCA Warning →Brits nearly twice as likely to spot pressure tactics in horror films as investment red flags
Investors are almost twice as likely to recognise pressure tactics in a horror film as they are when those tactics are used to promote an investment opportunity, new FCA data suggests. A survey of UK 18 to 40-year-olds...
Read FCA Warning →Bullseye Financial Ltd enters administration
On 23 October 2026, Bullseye Financial Ltd (Bullseye Financial) entered administration. Robert Young of Azets Holdings Limited and Matthew Haw of RSM UK Restructuring Advisory LLP were appointed as joint administrators....
Read FCA Warning →ICO Enforcement Notices & Data Protection Penalties
ICO Enforcement Notices & Monetary Penalties
The ICO regularly issues fines and enforcement notices for data protection breaches under UK GDPR. View the full register of actions below.
View ICO Enforcement Register →Is Your Business Exposed?
Many of these vulnerabilities affect software used by UK SMEs every day. The Cyber Resilience Review tells you where you stand and what to prioritise.
Explore the Cyber Resilience Review →Intelligence sourced from NCSC UK, the CISA Known Exploited Vulnerabilities Catalog, the FCA ScamSmart programme, and the ICO Enforcement register. This page is updated automatically every 12 hours. For the most current advisories visit the source links directly. GET-IT Cyber Division curates this content for UK SME relevance but is not responsible for the accuracy of third-party source data.