Most organisations don’t have a clear view of their external attack surface, what’s exposed, what’s changed, and where risk may be building over time. For many UK organisations, the National Cyber Security Centre’s Web Check and Mail Check services have quietly filled part of that gap.
Stripe has recently updated its security guidance to explicitly require merchants to have visibility into what code is running on their websites. In their certification process is a clear expectation: organisations handling payments should be monitoring client-side behaviour, not just backend systems. This isn’t a new regulation or a
After kicking 2026 off with a pretty big update, we've continued to push forwards with a lot of work across the board at Report URI HQ.
In late 2024, extending into 2025, the European Space Agency was forced to take its online store offline following a Magecart-style attack that compromised customer payment data. The incident was not the result of a traditional breach, stolen credentials, or a failure of perimeter security. It happened quietly, inside users’
This is a pretty big update, but we've been busy at Report URI HQ, and we have quite a few things to update you on!