Loading the page
Loading…
Northbridge Building Society
Finance · UK · watching northbridge.example, northbridge-bs.example · Briefing
Updated 6 min agoRefreshes automatically
Threat level
Severe
94/100 · +36 since 2 days ago
The most serious single thing found, not an average. The rules
Based on public threat feeds scored for you, your technology list, 2 watched domains and 3 suppliers. Not the full picture yet: no device list or security tool is connected, so flaws are matched by vendor and the level can read higher than it is. Connect a tool to see which are really on your devices.
Severe: 2 exploited vulnerabilities in your technology, 1 with public exploit code; 1 high-severity leak finding (stolen credentials or leaks tied to your domains); 3 lookalike domains to review, 1 registered in the last 60 days, 1 able to send mail.
The stories most about you in the last two weeks, each with one next step. All threats
50 Scored for your profile
Do: Check whether you run an affected version of CVE-2025-29824; patch or record why not. within 3 days
48 Active campaign · matches your VPN vendor · UK targeted · 3 feeds
Do: Check you would catch how Scattered Spider gets in, then brief whoever handles your help desk and email. within 3 days
46 Scored for your profile
Do: A firm like yours was hit by Scattered Spider. Check your backups are offline and tested, and that remote access needs a second factor. within 7 days
44 Active campaign · matches your VPN vendor · UK targeted
Do: Check you would catch how Scattered Spider gets in, then brief whoever handles your help desk and email. within 3 days
42 Scored for your profile
Do: Check whether you run an affected version (CVE-2025-29824); patch or record why not. within 7 days
3 of these 5 need action now (marked Now); the rest can wait for your next review.
Taken over a week ago with no note since.
5 items cleared in the last 30 days, typically in about 3 days from when we first saw them. 2 still open, the oldest for 4 days. Measured from when we first saw each one.
Would we have caught it?
5 of your top 5 threats have a gap in what your tools would catch.
2 not detected, 1 not blocked, 1 not patched. Biggest: Critical Fortinet FortiOS SSL-VPN pre-authentication heap-based buffer overflow (CVE-2025-24472)
Close the gapsThe level is set by the worst single thing, so getting to a lower level means clearing everything above it. Each list below includes the one before it.
The level is the most serious single thing found, not an average. The score next to it stays inside the level (Guarded 10 to 34, Elevated 35 to 59, Severe 60 to 100) and rises with each extra reason, so it only nears 100 when almost everything is wrong, and falls as you fix things. Snoozing an action removes its reason until the snooze ends.
Your team has checked 8 predictions and agreed with 6 (75%).
Based on the Right and Wrong buttons your team has pressed. How each model works