Connect with us

Business & Technology

Ethiack says vulnerabilities jumped 106% in a year

Published

on


Ethiack said the number of cyber vulnerabilities it identified across client IT environments rose 106% over the past year, increasing from 17,500 to more than 36,000.

The Portugal-based cybersecurity group said the rise came despite only a modest increase in the number of digital assets under monitoring. Vulnerabilities per monitored asset climbed from 0.9 to 1.7 over the same period, indicating a sharper rate of exposure across the systems it tested.

The figures add to broader evidence of a shift in how attackers gain entry to organisations. Verizon’s 2026 Data Breach Investigations Report found that exploited software vulnerabilities accounted for 31% of cyber breaches, up from 20% a year earlier, overtaking stolen passwords as the most common initial access route.

Ethiack said its platform tracked more than 190,000 digital assets during the year and now monitors more than 21,000 in-scope assets each month. Its client base grew 30% as the company expanded into the UK and Switzerland.

Threat speed

Ethiack linked the increase in discovered weaknesses to both improved detection and a faster-moving threat environment. Industry research it cited said the median time between a vulnerability being disclosed and being actively exploited has fallen from 771 days in 2018 to a matter of hours.

That shift has narrowed the time available for security teams to respond once flaws are discovered. In some cases, vulnerabilities are identified and attacked before public disclosure, leaving little room for patching or other defensive action.

Jorge Monteiro, Chief Executive Officer of Ethiack, described the pace of change as the main concern for defenders.

“The most important change we’ve seen over the past year isn’t the type of vulnerabilities attackers are exploiting. It’s the speed at which they’re finding and weaponising them.

For years, organisations could assume they had days, weeks or even months to identify and remediate vulnerabilities. That assumption no longer holds. Today, attackers can use AI to identify weaknesses, generate exploits and launch attacks in a matter of hours.

Perhaps most concerning is that AI can now help attackers reverse-engineer security patches themselves. Organisations may spend weeks developing and testing a fix, only for cybercriminals to analyse the patch and use it to identify the underlying vulnerability and attack it within minutes.

The mismatch between attacker speed and defender speed is growing. Periodic security assessments and annual penetration tests were designed for a different era. Organisations now need continuous monitoring of their attack surface and validation of any vulnerabilities to keep pace with the machine speed and scale of threats,” Monteiro said.

Company growth

The business added 13 employees and six ethical hackers over the year. Founded in Portugal in 2022 by André Baptista and Monteiro, it works with organisations across Europe, including ANA, Portugal’s national airport operator.

The increase in vulnerabilities identified does not necessarily mean every client environment became less secure in absolute terms, but it does point to a larger pool of weaknesses being uncovered as attack surfaces expand and tools improve. Modern corporate systems often span cloud services, third-party software, employee devices and internet-facing applications, increasing the number of possible entry points.

For security teams, the data adds to pressure to move faster on validation and remediation. If attackers can use AI to analyse newly issued patches and infer the flaws they address, the traditional gap between patch release and practical exploitation may continue to shrink.

That trend is becoming more significant as the volume of known software flaws rises each year. The challenge for organisations is not only discovering weaknesses, but also determining which are exploitable and urgent enough to prioritise before attackers act first.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Business & Technology

Most crypto social posts breach FCA rules, study finds

Published

on



JOSEPH GABRIEL LAGONSIN

News Editor

Adclear found that 89% of the most-viewed social media posts promoting cryptocurrency trading did not comply with Financial Conduct Authority rules. The finding was based on an analysis of 57 Instagram and TikTok posts.

The review looked at posts promoting or advising on crypto products and found that most contained at least one issue under FCA financial promotion guidance. It comes as the regulator prepares a new set of compliance requirements for crypto firms operating in the UK from 2027.

Social media has become an important source of information for retail investors considering digital assets. FCA consumer research cited alongside the analysis found that 29% of people who buy cryptoassets use social media to research them before purchasing.

Risk warnings

The most common problem was the absence of risk warnings. Across all posts analysed, 56% made no reference to the financial risks of trading cryptocurrency.

The rate was higher on Instagram, where 69% of posts made no mention of risk. On TikTok, the figure was 43%.

The review also found that 54% of posts did not disclose that the content was an advert, sponsorship, or partnership. Another 40% lacked balance in how they presented the risks and rewards of investing in crypto, while 30% did not make clear that past performance is not a reliable guide to future outcomes.

A smaller share, 7%, was judged not to be fair, clear, and not misleading under FCA standards. The analysis also found that 11% of posts promised guaranteed returns, even though cryptoassets are widely treated as high-risk products.

Regulatory backdrop

The findings come as the FCA sets out a broader regulatory framework for crypto firms in the UK. The planned changes are expected to introduce tighter rules on financial resilience and market integrity as the sector moves into a more formal supervisory regime.

The context matters because online personalities have become a prominent channel for crypto marketing, particularly among younger consumers. A compliance gap in that channel could draw greater scrutiny as the regulator focuses more closely on how financial promotions are presented to retail audiences.

Adclear’s automated compliance platform reviewed 57 posts tagged with #crypto that were published over a little more than a year. It compared the results with FCA expectations for financial promotions and concluded that non-compliance was widespread among so-called cryptofluencers.

The group said crypto-related influencer content appeared more compliant than posts promoting buy now, pay later products in its separate work, but less compliant than broader financial influencer content. It did not provide detailed comparative percentages in the material released.

Industry response

Joe Jordan of Adclear said the research pointed to basic disclosure failures rather than complex legal issues in many cases.

“As retail investing continues to attract a newer, younger generation of investors, crypto trading is set to become an increasingly mainstream part of our investing landscape. This is an exciting shift, but it also means we should expect to see more people turning to social media for trading knowledge and advice.

“With new rules on the way, this is a great moment for cryptofluencers to double down on aligning with FCA guidelines. Our analysis shows that many posts can improve their compliance with simple fixes, such as risk warnings or fully transparent ad disclosure. It’s an encouraging reminder that compliance isn’t necessarily complex. With the right checks and proper awareness of the rules, financial content across social media can become more trustworthy and transparent for everyone,” Jordan said.

The research adds to a growing debate over the role of online creators in marketing financial products. UK regulators have stepped up scrutiny of influencer promotions across investments, credit, and digital assets, arguing that consumers can be exposed to misleading or incomplete claims when content blurs the line between personal opinion and paid advertising.

For crypto firms, the issue is likely to become more acute as the UK brings the sector further inside the regulatory perimeter. Any business relying on social channels to reach potential customers may face pressure to tighten oversight of paid partnerships and unaffiliated endorsements alike.

The findings suggest that, at least in the sample reviewed, many of the most popular crypto posts still omit the warnings and disclosures UK rules require when high-risk investments are promoted to consumers.



Source link

Continue Reading

Business & Technology

Statement as UK jewellers in administration amid £189K debts

Published

on


The owners of John Gowing Jewellers Ltd, a shop based at the iconic Oxford Covered Market in operation since 1946, has made clear that the business is not closing after it went into administration.

A spokesperson said: “The recent corporate change relates to the former operating company as part of our corporate re-structuring and does not represent the closure of John Gowing Jewellers.

“Our Covered Market store remains open and is trading as normal, with our existing team continuing to serve customers.”

READ MORE: Director of Oxfordshire bakery business speaks out amid liquidation

The shop is an independent, family-run jeweller and watch specialist that also offers valuations, diamond accessories and repairs.

As of July 28, administrators from Begbies Traynor have been appointed to the company with a notice to strike the business off having been published on Companies House.

The notice was dated for August 4 and said that unless an objection was raised the company would be struck off the register in two months.

In its latest accounts for the 12 months to June 13, 2025, it reported creditors falling within a year of £188,705 as well as an average number of four employees.

John Gowing, who runs John Gowing jewellers in the Covered Market

The spokesperson for the business added that the recent “corporate change” has come about following new owners being appointed.

Indeed, in June 2025 John and Ann Gowing resigned as directors of the company and were replaced by Prasanna Perera according to Companies House.

The spokesperson said: “There has been no interruption to our watch, jewellery, repair or valuation services.

“Under new ownership, additional investment is supporting the next stage of the business.

“Our focus is to preserve the heritage, expertise and trusted local service John Gowing has built in Oxford since 1946, while strengthening the brand and creating opportunities for future growth.”

That the shop is not closing will be a relief for the Covered Market, which is a tourist hotspot and first opened in 1774.

Other companies at the historic venue have struggled in recent times including The Oxford Cheese Company, which said it was in “survival mode” earlier this year.

A spokesperson for the Oxford Cheese Company explained: “We’ve survived Covid, the Jesus College conversion, which virtually closed access to Market Street from Cornmarket, (no apologies or any compensation from the college), and the pedestrianisation of Market Street just recently.

John Gowing Jewellers (Image: Supplied)

“All of the above were beyond our control and meant resilience from our staff and our customers.”

Four years ago John Gowing Jewellery celebrated 75 years in operation.

At the time Mr Gowing – who was running the shop with his wife – was 66 years old and was celebrating half a century in the business with no plans to retire.

In addition he was hopeful about the future prospects of the market.

Speaking in the months after the Covid-19 pandemic, he said: “I do feel that the city council (the landlord of the Covered Market) has its heart in the right place and wants it to do well.

READ MORE: Probe launched after break-in at Cotswolds ‘gem’ backed by Jeremy Clarkson

“There are a number of empty units but at the same time there are plans for those units to be filled – I think four new businesses are currently being lined up to take over different units.”

There have been several break-ins at the shop in recent times including in 2018 when thieves reportedly took several rings and earlier that year when a topless man stole a Rolex watch.

In addition one man was jailed for almost five years for his part in an attempted robbery at the jewellers in 2013. His accomplice died after he collapsed.





Source link

Continue Reading

Business & Technology

Brickflow & Together launch instant broker loan tool

Published

on



KAREN JOY BACUDO

Finance Editor

Brickflow and Together have launched an automated decision-in-principle feature for brokers. The tool gives an instant decision on selected Together products through the Brickflow platform.

Called AutoDIP, the feature applies to Together’s bridging loans and commercial term products. Brokers using Brickflow will see the option when Together appears among the shortlisted lenders for a deal, and can then request a decision directly through the system.

Once the required appraisal information has been submitted, Together returns a decision within seconds. This removes the need for manual handling at that stage of the application process and allows brokers to give clients an early indication of terms.

The launch follows months of technical work to deepen Together’s integration with Brickflow. Together was already on Brickflow’s lender panel, and the new arrangement adds an automated route for decisions in principle within the existing platform.

Brickflow operates a digital marketplace for commercial property finance in the UK. The platform connects brokers and borrowers with live rates and criteria from more than 160 specialist lenders, according to Brickflow.

Broker process

Brokers enter deal details into Brickflow and receive matching lender options. If Together is selected from that list, they can request an automated decision in principle without leaving the platform.

The change targets a stage of the lending process where delays can emerge, particularly in more complex cases. The companies pointed to market research showing that 16% of brokers cited the affordability assessment and decision-in-principle stage as a point where cases stall, while 32% of lenders identified faster decision-making as a priority for improvement.

The research was published by Nottingham Building Society and reported by The Intermediary. It highlights pressure on lenders and intermediaries to shorten response times while managing more detailed underwriting requirements.

For brokers, the appeal of an automated decision is not only speed but also less repeated data entry. By keeping the request within a single workflow, the system is designed to cut duplication and reduce the risk of manual errors as information passes between broker and lender.

The launch also reflects broader changes in specialist property finance, where lenders and broker platforms have invested in digital tools to simplify early-stage screening and improve certainty before a full application is submitted. Decisions in principle have long been a key checkpoint for borrowers seeking reassurance that a lender is likely to proceed on the stated terms.

Company comments

“This launch represents a meaningful step forward in modernising the broker application journey. By delivering instant DIPs through automation, we’re providing brokers with faster certainty, reducing friction, and helping them progress cases more efficiently for their clients,” Glenn Franklin-Jones, Director of Lender Relations at Brickflow, said.

Together is a specialist secured lender offering residential mortgages, short-term finance, buy-to-let, commercial and semi-commercial mortgages and loans, auction finance, and development funding across mainland UK. It has a loan book of GBP £8.4 billion and employs more than 900 people, according to the lender.

For Together, AutoDIP provides a more direct route to brokers using Brickflow for commercial property finance searches. For Brickflow, the tie-up adds another automated element to its platform as competition among intermediaries and lenders intensifies over turnaround times and borrower engagement at the start of a case.

“Working with Brickflow allows us to deliver faster, clearer outcomes for brokers at the very start of the lending journey. Instant automated DIPs help brokers move with confidence and provide borrowers with certainty sooner,” said Tanya Elmaz, Managing Director of Intermediary Sales at Together.



Source link

Continue Reading

Trending