UK Government Unveils AI Cyber Security Code of Practice to Protect Digital Economy
The UK government has launched a world-leading AI Cyber Security Code of Practice, aiming to set a new standard in securing artificial intelligence (AI) systems. This initiative is designed to protect businesses, public services, and the wider digital economy from emerging cyber threats, ensuring the UK remains a leader in responsible AI development and deployment. […]
Understanding Spear Phishing: How Targeted Phishing Attacks Threaten Businesses
What is Spear Phishing? Spear phishing is a more advanced form of phishing that specifically targets individuals or organisations. Unlike regular phishing, which casts a wide net with mass emails, spear phishing attacks use personalised messages and social engineering techniques to deceive their intended target. By exploiting confidential information, attackers aim to gain access to […]
Understanding Red Teaming
The Importance of Red Teaming in Cyber Security Enterprises must go beyond traditional security measures to safeguard sensitive data and prevent security incidents. Red teaming is a proactive approach where red team operators simulate real-world attacker techniques to assess an organisation’s security posture. By adopting the mindset of threat actors, red teams help identify vulnerabilities […]
Cyber Threat Alert: Hackers Exploiting SimpleHelp RMM Vulnerabilities
Cyber criminals exploit recently patched vulnerabilities in SimpleHelp Remote Monitoring and Management (RMM) software to gain initial network access. These flaws, CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728, allow attackers to upload and download files on compromised devices and escalate privileges to administrative levels. Ongoing Attacks Targeting SimpleHelp Servers Research from Arctic Wolf indicates an ongoing campaign targeting […]
‘Sneaky Log’ Phishing Scheme Targets Microsoft 365 Two-Factor Security
Phishing Attacks target Microsoft 365 | At Neuways, we understand that cyber threats evolve rapidly, and staying ahead of attackers is critical for businesses relying on Microsoft 365. A recent discovery by cyber security researchers revealed a new and dangerous phishing-as-a-service (PhaaS) scheme called Sneaky Log, which poses a significant threat to organisations using Microsoft […]
WhatsApp accounts compromised by Cyber Criminals
WhatsApp accounts compromised by Cyber Criminals: The latest Whatsapp Phishing attack highlights the growing sophistication of phishing campaigns, particularly those targeting organisations with a high volume of sensitive data or a role in international affairs. Star Blizzard’s WhatsApp phishing tactic demonstrates technical ingenuity and a deep understanding of human behaviour, exploiting trust in familiar platforms […]
Houses of Parliament Blocks Over 46 Million Email Attacks in Three Years
Recent data from the Freedom of Information Act paints a stark picture of the escalating cyber security challenges the UK’s government agencies face. Over the past three years, the UK Houses of Parliament have intercepted and blocked more than 46 million email-based cyber attacks, underscoring the severity and persistence of these threats. A Growing Threat […]
Critical Ivanti Zero-Day Exploited: Immediate Action Required
The UK’s National Cyber Security Centre (NCSC) and its US counterpart have issued an urgent advisory to Ivanti customers after discovering two critical vulnerabilities, one of which is actively exploited. Read on to see how the Ivanti Zero-Day Vulnerability was exploited. Details of how the Ivanti Zero-Day Vulnerability was exploited Ivanti released a security advisory […]
Casio Data Breach: Lessons from the October 2024 Ransomware Attack
On January 7, 2025, Casio disclosed that an October 2024 ransomware attack exposed the personal data of approximately 8,500 individuals. This breach affected Casio employees, business partners, and a small number of customers. While the company has taken steps to address the situation, this incident serves as a stark reminder of the ongoing cyber security […]
The Importance of 24/7 Cyber Security Monitoring
In 2025, businesses of all sizes rely on technology to function efficiently. Technology underpins nearly every business operation, from managing supply chains to handling customer data. While this connectivity delivers unprecedented opportunities for growth, it also creates vulnerabilities. Cyber threats are evolving rapidly, and attackers often strike when businesses are least prepared. This is why […]
