CISA confirms PHP2Shell under attack as researchers clock successful exploits
Independent industry reporting
Read original article (opens in a new tab) Insight · guidance · regulatory change
Cyber Hub
Cyber guidance you can use.
Read practical guides, follow industry news and check updates from regulators. Each section helps you understand what matters to your organisation and where to find more detail.
Industry news · live
- The Register · 27 OCTCISA confirms PHP2Shell under attack as researchers clock successful exploits
- The Register · 27 OCTMicrosoft releases out-of-band Windows fixes with certificate updates
- NCSC · 27 OCTFrom industry concern to practical action: the value of working with regulators
- The Register · 27 OCTAttack on email hosting provider for German far right party AfD exposed 345k accounts
- The Register · 27 OCTJapanese virtual desktop cloud hacked so hard it asks to be banned
- NCSC · 21 OCTCritical security issue affecting PHP
- NCSC · 20 OCTIntroducing a new AI chapter in the NCSC research problem book
- NCSC · 15 OCTPost-quantum updates to our TLS guidance
01 / Guidance Practical guidance and analysis
Find answers to practical questions.
These guides explain what to check, which evidence to ask for and how to discuss the findings with your team.
-
Cyber due diligence in M&A: what buyers need to know
What to check about a company’s technology, contracts and operations before an acquisition.
Explore due-diligence guidance -
From policies to evidence
How to check that the controls described in your policies work in practice.
Explore governance and assurance -
Use NCSC reporting to review your security
Use current threat reports to check what your provider covers, who responds and how they demonstrate results.
Read NCSC reports and advisories -
Supporting the people behind cyber
CyberRocks brings people from across the industry together and raises awareness of PTSD.
Follow Musketeers on LinkedIn
02 / Industry articles Independent security reporting
Read the latest security reporting.
Read independent security headlines from The Register and official UK cyber guidance from the NCSC. Each article shows the publisher's date and links to the original.
Articles checked 27 Oct 2026. Publication dates are supplied by the publishers.
-
Microsoft releases out-of-band Windows fixes with certificate updates
Independent industry reporting
-
From industry concern to practical action: the value of working with regulators
Official security insight · UK
-
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Independent industry reporting
-
Japanese virtual desktop cloud hacked so hard it asks to be banned
Independent industry reporting
-
Critical security issue affecting PHP
Official security news · UK
-
Introducing a new AI chapter in the NCSC research problem book
Official security insight · UK
-
Post-quantum updates to our TLS guidance
Official security insight · UK
Sources and update status
NCSC material contains public sector information licensed under the Open Government Licence v3.0. Source attribution does not imply endorsement. Article images are shown only when the publisher supplies one.
- NCSC — ncsc-news: ok, last success 27 Oct 2026 (1 items)
- NCSC — ncsc-blog: ok, last success 27 Oct 2026 (3 items)
- The Register — register-security: ok, last success 27 Oct 2026 (4 items)
- NCSC — ncsc-reports: disabled (0 items)
03 / Regulator radar What has changed and who it affects
Understand what has changed and who it affects.
Follow the links to the official guidance. Check which organisations it applies to and when it takes effect before deciding what your business needs to do.
Articles checked 27 Oct 2026. Publication dates are supplied by the publishers.
Sources and update status
This feed covers the European Data Protection Board (EU), including news about national authority decisions. Check each item's jurisdiction and document type before treating it as a change in law. UK sources remain available through the direct links below; their feeds are not connected. EDPB is the source of the attributed material and bears no liability for this reuse.
- EDPB — edpb-news: ok, last success 27 Oct 2026 (1 items)
- EDPB — edpb-publications: ok, last success 27 Oct 2026 (3 items)
Ongoing themes to explore
- 01
NIS2 and UK supply chains
Check which organisations, contracts and services fall within scope, and what that means for your supply chain.
- 02
AI governance expectations
Agree how AI may be used, who approves it, what evidence to keep and how people can raise concerns.
- 03
Operational resilience evidence
Show how your critical services depend on people, systems and suppliers. Test how they recover, record the results and address what you learn.
04 / Events Cyber Rocks
Community events hosted by Musketeers.
Cyber Rocks brings security professionals together for an evening of live music and open conversation, with no sales pitches. Each event raises money and awareness for PTSD UK. Everyone in the cyber community is welcome; details of the next event are alongside.
Cyber Rocks Returns
Musketeers Security · 1 October 2026, 5 to 8pm
Simmons Bar, Monument, London.
Live music and conversation with the cyber community, supporting PTSD UK.
05 / Briefing The Cyber Hub, by email
Get the Cyber Hub briefing.
One short email when there is something worth your time: a featured practical article, regulatory changes in plain English, a brief update on threats or choosing a provider, and Musketeers news.
Business email addresses only. This is the only form on the site that subscribes you to email updates, and only with the tick below. Every issue includes an unsubscribe link.