Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

MSSPs are being asked to secure more clients, across more industries, with more tools than ever before. This post explains why simply adding another threat feed to the stack doesn't solve the problem, and what MSSPs need to operationalise intelligence at scale.

On 17 September 2026, users on X (formerly Twitter) posted that payment details belonging to other individuals had appeared on the Cineworld app under their personal accounts. On 17 September 2026, users on X (formerly Twitter) posted that payment details belonging to other individuals had appeared on the Cineworld app under their personal accounts.

Most security programmes are built to watch the inside of the network, but the threats that do the most damage often start outside it: leaked credentials, impersonated domains, dark web chatter, and vulnerabilities under active discussion. This post looks at why the visibility gap exists, what the data says about it, and what closing it involves.

Most organisations are not short of threat data. They lack intelligence they can act on. This piece sets out the practical difference between the two, with real examples of what actionable looks like in day-to-day security operations.

CYJAX joins the UK's professional body for cyber security, reinforcing its commitment to developing cyber talent, upholding the highest ethical standards and helping strengthen the future of the profession. CYJAX is proud to announce that we have become a corporate member of the UK Cyber Security Council, the independent professional body dedicated to advancing the cyber security profession across the UK.

A strong internal security score means little if the brokers, claims processors, and software vendors an insurer depends on are the weak link. This blog breaks down where insurance supply chain risk sits and what to do about it.

Cyber threats rarely start in hidden corners of the internet. Most begin in plain sight, on social media, before moving into Telegram channels and dark web forums. This blog looks at why organisations need visibility across the open and underground web, and how CYJAX connects the two into one picture of risk.

CYJAX intelligence is now built directly into Google SecOps SIEM and Microsoft Sentinel, giving analysts structured, normalised threat data inside the platforms they already use. Four feeds are live in Google SecOps and eight endpoints are available in Microsoft Sentinel's Content Hub.

Fraud against rail operators extends well beyond fare dodging. CYJAX breaks down how compensation scheme abuse, insider fraud and Telegram marketplaces for discounted tickets are combining to create a persistent revenue threat across the UK rail sector.

Domain Monitor's detection engine has been rebuilt to catch impersonation domains that keyword matching was never built to find. This release covers the new evidence-based matching engine, per-keyword Low, Medium and High thresholds, and what's coming next as the improvements roll out in stages. Domain Monitor's detection engine has been rebuilt from the ground up.