Need to keep on top of threats and vulnerabilities, but don’t have time to trawl through dozens of advisories every week? We’ve launched a free threat and vulnerability intelligence service, and we do the hard work for you. Here’s what it includes and how to get it.
The threat and vulnerability intelligence feed
A dedicated section of our website for significant threats and actively exploited vulnerabilities. Each post explains in plain English what the issue is, who is affected, and how to fix it, with links to the original sources. You’ll find it under the red shield in our website header, or in Insights, where you can also search for a CVE number, product, or topic. Go to the feed.
The weekly round-up
Every Monday, a round-up of the past week drops into the feed. It covers the actively exploited vulnerabilities and notable campaigns that matter most, drawn from sources including the NCSC, CISA, CERT-EU, and major vendor advisories, with practical steps linked to ISO/IEC 27001 and Cyber Essentials.
The weekly insights email: the easiest way to keep up
Subscribe free and every Monday you’ll get:
- a summary of the round-up, with what to patch now;
- a link to download our threat log spreadsheet, listing each vulnerability and threat with its CVE, fix, and our priority rating, ready to filter and share with your IT team;
- the legal, regulatory, standards, and AI governance updates you choose, for the regions you care about.
Urgent alerts, straight to your inbox
Some flaws can’t wait until Monday. Tick “Also email me urgent alerts” when you subscribe, and we’ll email you as soon as we publish an alert about a critical vulnerability being actively exploited in a widely used product. These are rare, usually no more than a few a month. Already subscribed? Just sign up again with the same email address and tick the box.
Why it matters
Attackers move quickly once a vulnerability becomes public, and internet-facing systems such as VPNs, firewalls, and remote access gateways are a favourite target. Threat intelligence is also an explicit requirement of ISO/IEC 27001:2022 (control A.5.7), and effective vulnerability management (control A.8.8) depends on knowing what to patch first. Our service gives you a reliable, time-saving starting point for both.
This is awareness content, not a monitored threat intelligence service: always check vendor advisories against your own environment. If you would like help turning threat intelligence into action, contact us.