CybelAngel

16/10/2026

95% of organizations increased their TPRM budgets in 2025. So, where exactly does that leave your program, and more importantly, is it built to deliver on its purpose?

Download our report: https://eu1.hubs.ly/H0z6nxt0

15/10/2026

Why is Google dorking still one of the most underused tools in a blue team's continuous monitoring programme?

Our quintessential guide shows how security teams use it in 2026,not as a list of operators to memorise, but as a structured OSINT methodology.

Inside it you'll find:
- The five operator families that matter for security investigations
- How experienced analysts build investigation workflows from passive enumeration through to multi-engine cross-referencing
- The specific operator combinations that surface the highest-severity findings
- Where Google dorking stops and what fills the gaps (dark web monitoring, Shodan, Censys, paste site APIs)
- Six technical FAQ answers written for practitioners

How teams use Google dorks for OSINT. Real investigation workflows, operator combinations, multi-engine techniques and key automation tools.

15/10/2026

Our jobs board is packed with internships, analyst roles, and leadership positions so don’t forget to take a peak today!
https://eu1.hubs.ly/H0z28-R0

14/10/2026

As reported by the BBC, Hobbs, Whistles and Phase Eight owner TFG London is the latest retailer to confirm a cyber security incident, with several IT systems impacted across all three brands, following a separate claim that H&M has also been targeted.

Retail and luxury are firmly in the crosshairs right now. From high street to high-end, threat actors are systematically probing the sector for weak points across supply chains, digital storefronts, and customer data. TFG joins a growing list of brands navigating active incidents, and it will not be the last.

If you want to understand how your organisation is exposed before an incident forces the conversation, our latest luxury and retail threat intelligence note is a good place to start:

TFG London has apologised to customers for disruption after it identified a "cybersecurity incident" on Sunday.

13/10/2026

CVE-2026-85097 a critical flaw in a WordPress plugin is causing a few headaches this week

We've got 3 takeaways for you (we discuss more over in our blog) :
✅ The flaw is CVSS 10.0, unauthenticated, and already exploited in the wild
✅ It only takes one agency-built microsite on your estate to become the entry point
✅ The patch window closed before the public advisory went out

Read more: https://eu1.hubs.ly/H0z1XFJ0

13/10/2026

We’re thrilled to be attending the upcoming CyberDefenseCon in Orlando, Florida!

Mehdi and Saakshi will be on the ground to meet you all, and have some great discussions on all things cyber threat exposure.

Join us there from October 20-21 in sunny Orlando!

09/10/2026

Interested in finding out what happens to cybercriminals once criminal proceedings begin?

Our Analyst Dan tackles these questions after inviting the Parisian Cybercrime prosecution squad into our office: https://eu1.hubs.ly/H0yZQnD0

08/10/2026

British online fast-fashion and cosmetic retailer, Asos has told its customers that hackers are in possession of detailed profiles of potentially millions of the online store's users. The BBC reports that it was contacted by the cyber criminals behind this attack who have “Names, addresses, phone numbers, emails and customer numbers are now in the hands of cyber criminals.”

Read more via the BBC:

Retailer issues update after BBC contacted by cyber criminals who said this week's breach went beyond "basic contact details"

08/10/2026

Atlassian's CVE-2026-21589 was exploited two hours after public details landed. So, what exactly does your business need to know? https://eu1.hubs.ly/H0yYv-y0

06/10/2026

Rogue AI agents tried to turn Wikipedia's own tools into proxies, flooded its APIs with millions of requests, and may have contributed to a partial outage.

Their playbook: tampering with a citation tool's config to relay remote fetches, attempting to hijack a public Etherpad for proxying, and firing thousands of queries at the Wikidata Query Service:

Wikimedia says rogue OpenAI agents edited wikis, tried to compromise Etherpad, and sent millions of automated requests to its APIs.