--- title: blog description: Discover insights on cybersecurity trends, vulnerabilities, and innovations through expert articles covering topics from identity security to quantum readiness and emerging threats. --- [Skip to content](https://csacyber.com/blog#main-content) [![CSA Cyber - Cyber Security Solutions to Protect your People](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=300&height=108&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber - Cyber Security Solutions to Protect your People")](https://csacyber.com/) - Services - [Offensive Security Services](https://csacyber.com/offensive-security-services) - [Penetration Testing](https://csacyber.com/penetration-testing) - [Red Teaming and attack simulations](https://csacyber.com/offensive-security-services#red-teaming) - [Continuous testing](https://csacyber.com/offensive-security-services#continuous-assurance) - [Managed offensive security](https://csacyber.com/offensive-security-services#managed-offensive) - [Consultancy Services](https://csacyber.com/cyber-consultancy-services) - [Frameworks & assessments](https://csacyber.com/cyber-consultancy-services/frameworks-and-assessments) - [Data protection](https://csacyber.com/cyber-consultancy-services#data-protection) - [Virtual leadership](https://csacyber.com/cyber-consultancy-services#virtual-leadership) - [Technical security consulting](https://csacyber.com/cyber-consultancy-services#technical-consultancy) - [Governance, Risk & Compliance (GRC)](https://csacyber.com/cyber-consultancy-services/governance-risk-and-compliance-services) - [Extended Managed Security Services](https://csacyber.com/extended-managed-security-services) - [Microsoft Sentinel SIEM](https://csacyber.com/extended-managed-security-services#microsoft-sentinel) - [SOC services](https://csacyber.com/extended-managed-security-services#soc-services) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/extended-managed-security-services#cyber-helpdesk) - [Incident Response Services](https://csacyber.com/incident-response-services) - [Emergency Incident Response](https://csacyber.com/urgent/emergency-incident-response) - [Incident Response Retainer](https://csacyber.com/incident-response-services) - [Cyber Incident Readiness & Response Planning](https://csacyber.com/incident-response-services) - [Tabletop Exercises & Live-Range Engagements](https://csacyber.com/incident-response-services) - [Specialist Security Services](https://csacyber.com/specialist-services) - [AI Security](https://csacyber.com/cyber-services-for-ai) - [Operational Technology (OT)](https://csacyber.com/specialist-services#operational-technology) - [Cyber security for Private Equity](https://csacyber.com/specialist-services#mergers-and-acquisitions) - [Cyber training and education](https://csacyber.com/specialist-services#training-and-education) - [Virtual leadership](https://csacyber.com/specialist-services#leadership) - [Cyber Technologies](https://csacyber.com/cyber-technologies) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/cyber-technologies#sentinelone) - [AppGuard Endpoint & Server Zero Trust Protection](https://csacyber.com/cyber-technologies#appguard) - [Qualys Vulnerability Management as a Service (VMaaS)](https://csacyber.com/cyber-technologies#qualys-vmaas) - [Lookout Mobile Device Protection](https://csacyber.com/cyber-technologies#lookout) - [ThreatER DNS Protection](https://csacyber.com/cyber-technologies#threater-dns) - [Cyber Security Awareness & Training platform](https://csacyber.com/cyber-technologies#boxphish) - [About](https://csacyber.com/about-us) - [Careers](https://csacyber.com/careers) - [Certifications](https://csacyber.com/certifications-and-awards) - [Blog](https://csacyber.com/blog) - [Support Centre](https://csacyber.com/support) - Resources - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Partners](https://csacyber.com/partners) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) - [Contact](https://csacyber.com/contact-us) - Search Search Search # Blog - [All](https://csacyber.com/blog/all) - [Article](https://csacyber.com/blog/tag/article) - [Consultancy](https://csacyber.com/blog/tag/consultancy) - [Security Operations](https://csacyber.com/blog/tag/security-operations) - [News](https://csacyber.com/blog/tag/news) - [Penetration Testing](https://csacyber.com/blog/tag/penetration-testing) - [Threat Briefing](https://csacyber.com/blog/tag/threat-briefing) [![](https://csacyber.com/hubfs/Blog%20images%20%281%29.jpg)](https://csacyber.com/blog/when-the-sea-becomes-the-battleground-what-the-texas-bound-tanker-attacks-tell-us-about-ot-security) - [Nathan Long](https://csacyber.com/blog/author/nathan-long) - October 19, 2026 ### [When the sea becomes the battleground: What the Texas-bound tanker attacks tell us about OT security](https://csacyber.com/blog/when-the-sea-becomes-the-battleground-what-the-texas-bound-tanker-attacks-tell-us-about-ot-security) The recent cyber incidents involving two Texas-bound energy tankers may be one of the clearest examples of that... [Read more](https://csacyber.com/blog/when-the-sea-becomes-the-battleground-what-the-texas-bound-tanker-attacks-tell-us-about-ot-security) [![](https://csacyber.com/hubfs/Blog%20images.jpg)](https://csacyber.com/blog/the-attack-surface-has-changed.-the-fundamentals-have-not) - [Nathan Long](https://csacyber.com/blog/author/nathan-long) - October 16, 2026 ### [The attack surface has changed. The fundamentals have not.](https://csacyber.com/blog/the-attack-surface-has-changed.-the-fundamentals-have-not) Note from the author: Fair warning: this turned into a longer post than planned. I’m under no illusion that everyone... [Read more](https://csacyber.com/blog/the-attack-surface-has-changed.-the-fundamentals-have-not) [![](https://csacyber.com/hubfs/20230510-N1005919-Edit1.jpg)](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 24, 2026 ### [FluidOne Group appoints Charly Davis as Managing Director of CSA Cyber to advance its security-first strategy](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) Experienced industry leader joins FluidOne to strengthen integrated cyber, IT and secure networking services as the... [Read more](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) [![](https://csacyber.com/hubfs/Untitled%20design.jpg)](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 20, 2026 ### [CSA Cyber and FluidOne named as suppliers on G-Cloud 15](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) CSA Cyber (CSA), part of the FluidOne Group, has been named as a supplier on Government Commercial Agency’s RM1557.15... [Read more](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) [![](https://csacyber.com/hubfs/Engineered%20to%20Endure%20Campaign%20Assets%20(2).png)](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 20, 2026 ### [Why organisations lose security visibility without realising it](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) Before an organisation can understand risk, maintain control or respond effectively to emerging issues, it needs a... [Read more](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) [![](https://csacyber.com/hubfs/NEW%20CSA%20Blog%20images%20(2026)%20(1).png)](https://csacyber.com/blog/the-interconnected-forces-driving-a-new-era-of-third-party-assurance) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 18, 2026 ### [Chain of effect: The interconnected forces driving a new era of third-party assurance](https://csacyber.com/blog/the-interconnected-forces-driving-a-new-era-of-third-party-assurance) Where does your supply chain really end? For many organisations, the answer is no longer obvious. 🔗 A supplier may... [Read more](https://csacyber.com/blog/the-interconnected-forces-driving-a-new-era-of-third-party-assurance) [![](https://csacyber.com/hubfs/Social%20engineering%20IMG%20(1).png)](https://csacyber.com/blog/the-evolution-of-social-engineering-in-2026) - [Jack Gilmore](https://csacyber.com/blog/author/jack-gilmore) - August 5, 2026 ### [The evolution of social engineering in 2026: How attackers are exploiting human trust](https://csacyber.com/blog/the-evolution-of-social-engineering-in-2026) For years, social engineering has been one of the most effective techniques in a threat actor's arsenal. Rather than... [Read more](https://csacyber.com/blog/the-evolution-of-social-engineering-in-2026) [![](https://csacyber.com/hubfs/WinSxS%20img%20%281%29.png)](https://csacyber.com/blog/winsxs-the-6000-binary-blind-spot-in-your-edr) - [Steve Velcev](https://csacyber.com/blog/author/steve-velcev) - July 30, 2026 ### [WinSxS: The 6,000-binary blind spot in your EDR](https://csacyber.com/blog/winsxs-the-6000-binary-blind-spot-in-your-edr) Every Windows 10 and 11 machine ships with thousands of Microsoft-signed executables in “C:\\Windows\\WinSxS” that can be... [Read more](https://csacyber.com/blog/winsxs-the-6000-binary-blind-spot-in-your-edr) [![](https://csacyber.com/hubfs/Cyber%20Pledge%20Image.png)](https://csacyber.com/blog/csa-cyber-signs-the-uks-cyber-resilience-pledge) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - July 21, 2026 ### [CSA Cyber signs the UK's Cyber Resilience Pledge: What it means and why it matters](https://csacyber.com/blog/csa-cyber-signs-the-uks-cyber-resilience-pledge) CSA Cyber has signed the UK Government's Cyber Resilience Pledge, joining the first wave of organisations supporting a... [Read more](https://csacyber.com/blog/csa-cyber-signs-the-uks-cyber-resilience-pledge) [![Responsive FileManager Version 9.14.0 Multiple Vulnerabilities – CVE-2026-3726](https://csacyber.com/hubfs/AI-Generated%20Media/Images/Security%20Alert%20File%20Management%20System%20Vulnerability%20Warning.png)](https://csacyber.com/blog/responsive-filemanager-version-9-14-0-multiple-vulnerabilities-cve-2026-37266) - [Julian Nguyen](https://csacyber.com/blog/author/julian-nguyen) - May 28, 2026 ### [Responsive FileManager Version 9.14.0 Multiple Vulnerabilities – CVE-2026-37266](https://csacyber.com/blog/responsive-filemanager-version-9-14-0-multiple-vulnerabilities-cve-2026-37266) TL;DR CSA Cyber identified a Local File Inclusion (LFI) and arbitrary file creation issue within Responsive FileManager... [Read more](https://csacyber.com/blog/responsive-filemanager-version-9-14-0-multiple-vulnerabilities-cve-2026-37266) [![Claude Mythos](https://csacyber.com/hubfs/Claude_FeaturedIMG2.jpg)](https://csacyber.com/blog/claude-mythos-the-fact-and-the-fiction) - [Arron Dowdeswell](https://csacyber.com/blog/author/arron-dowdeswell) - April 15, 2026 ### [Claude Mythos: The fact and the fiction](https://csacyber.com/blog/claude-mythos-the-fact-and-the-fiction) What is Claude Mythos? Anthropic announced Claude Mythos and project Glasswing on April 7th 2026. [Read more](https://csacyber.com/blog/claude-mythos-the-fact-and-the-fiction) [![](https://csacyber.com/hubfs/bluepad_1200x627.png)](https://csacyber.com/blog/osticket-timing-vulnerability-understanding-the-risk) - [Ruben Ferreira](https://csacyber.com/blog/author/reuben-ferreira) - April 1, 2026 ### [osTicket timing vulnerability: Understanding the risk](https://csacyber.com/blog/osticket-timing-vulnerability-understanding-the-risk) osTicket password reset endpoint timing side‑channel enables user enumeration – CVE‑2026‑26895 Summary: CSA Cyber... [Read more](https://csacyber.com/blog/osticket-timing-vulnerability-understanding-the-risk) PREVIOUS [1](https://csacyber.com/blog) [2](https://csacyber.com/blog/page/2) [3](https://csacyber.com/blog/page/3) [4](https://csacyber.com/blog/page/4) [5](https://csacyber.com/blog/page/5) [NEXT](https://csacyber.com/blog/page/2) [![CSA Cyber Logo FNL\_Full Logo](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=3463&height=1248&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber Logo FNL_Full Logo")](https://csacyber.com/) Established in 2013, Cyber Security Associates Limited trading as CSA Cyber provides cyber consultancy and cyber managed services which help to detect, protect and educate against the ever-changing cyber threat. We have built our team from a foundation of Government (ex-Military) and Commercially experienced specialists all holding current and relevant cyber certifications. Today our core services are based around a 24/7 Security Operations Centre (SOC) based in Gloucester. #### News & Resources - [Blog](https://csacyber.com/blog) - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Careers](https://csacyber.com/careers) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) #### Quick Links - [About Us](https://csacyber.com/about-us) - [Certifications](https://csacyber.com/certifications-and-awards) - [Our Parent Company](https://www.fluidone.com) - [Partners](https://csacyber.com/partners) - [Contact Us](https://csacyber.com/contact-us) - [Anti Bribery Policy](https://csacyber.com/hubfs/CSAAnti-BriberyPolicy.pdf) - [Complaints Policy](https://csacyber.com/hubfs/CSAComplaintsPolicy.pdf) - [Corporate Social Responsibility Policy](https://csacyber.com/hubfs/CSACorporateSocialResponsibilityPolicy.pdf) - [Slavery and Human Trafficking Statement](https://csacyber.com/hubfs/CSASlaveryandHumanTraffickingStatement.pdf) - [NCSC CHECK Status Verification](https://www.ncsc.gov.uk/organisation/csa-cyber/check-penetration-testing) - [CREST Approved Certification Verification](https://www.crest-approved.org/member_companies/csa-cyber/) #### Contact Information **United Kingdom - London** Cyber Security Associates Ltd 5 Hatfields, London, SE1 9PG   **United Kingdom - Gloucester** Cyber Security Associates Ltd Unit 11, Wheatstone Court, Waterwells Business Park, GL2 2AQ   **Phone:** [+44(0) 300 303 4691](tel:03003034691) **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   **United States of America** Cyber Security Associates Inc. 6010 W. Spring Creek Pkwy, Plano, Texas, 75024   **Phone:** [+1 469 750 1695](tel:14697501695)  **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   [![trust-pilot](https://csacyber.com/hs-fs/hubfs/trust-pilot.png?width=178&height=104&name=trust-pilot.png)](https://uk.trustpilot.com/review/csa.limited)   --- - [Website Terms of Use](https://csacyber.com/website-terms-of-use) - [Website Privacy Policy](https://csacyber.com/privacy-notice) - [Website Cookie Policy](https://csacyber.com/cookie-policy) Copyright 2026. Cyber Security Associates Ltd [Follow us on Facebook](https://www.facebook.com/CSALIMITED/) [Follow us on LinkedIn](https://www.linkedin.com/company/csa-cyber/) [Follow us on Twitter](https://twitter.com/cybersecurityis) [Follow us on Facebook](https://www.youtube.com/@cybersecurityassociateslim) [Follow us on Facebook](https://www.instagram.com/cybersecurityassociates)