The primary threat is phishing, specifically via impersonation emails leading to fake login pages, which accounts for approximately 85% of reported breaches. The article does not describe a specific software vulnerability with version ranges, but rather a persistent attack vector targeting human behavior. While many organizations have basic protections like malware software, adoption of advanced controls such as two-factor authentication remains insufficient.
Data Security , Breach UK businesses face persistent cyber breaches, with phishing as a primary threat May 1, 2026 Share By SC Staff (Adobe Stock) Nearly half of UK businesses continue to experience cyber breaches, with a significant number of these attacks originating from employees falling victim to phishing scams, with further coverage provided by The Register. The UK government's latest Cyber Security Breaches Survey reveals that 43% of businesses and 28% of charities reported a cyber incident in the past year. Phishing, primarily through impersonation emails leading to fake login pages, is the dominant attack method, accounting for approximately 85% of breaches reported by businesses. Malware, ransomware, and unauthorized access trail significantly behind. Among affected businesses, about a quarter experience breaches weekly, with some reporting daily occurrences. Charities are seeing an increase in attack frequency. While many organizations are implementing basic security measures like updated malware protection and password rules, fewer are adopting advanced protections such as two-factor authentication. Small businesses have seen a decline in cybersecurity risk assessments. Supply chain vulnerabilities remain a concern, with only a small percentage of businesses reviewing risks from their suppliers. Furthermore, a notable portion of businesses and charities hold unprotected personal data, increasing the value of potential breaches. Source: The Register SC Staff Related Security Operations Practice by Numbers fixes patient data exposure bug SC Staff May 1, 2026 A patient, Joseph R. Cox, discovered the vulnerability, which allowed any user with portal access to view other patients' documents, including personal information, medical histories, and photo identification. Security Operations Polymarket denies data breach claims by hacker Xorcat SC Staff April 30, 2026 Xorcat claimed to exploit several vulnerabilities, including undocumented API endpoints, a pagination bypass on the CLOB trading system by altering code to request nearly a million data points, and a CORS misconfiguration. Data Security Asian Football Confederation reportedly suffers massive data breach SC Staff April 30, 2026 A threat actor claimed on a dark web forum to have obtained and leaked a complete database of AFC players and coaches, including data from Al Nassr FC. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector Block Cipher Byte Cipher Cyclic Redundancy Check (CRC) Data Encryption Standard (DES) Data Loss Prevention (DLP) Data Warehousing Digital Envelope Digital Signature You can skip this ad in 5 seconds