In recent years, the intersection of artificial intelligence (AI) and cyber-operations has become a pivotal battleground for state actors. What was once largely the domain of human hackers sitting at keyboards is increasingly shifting into systems that learn, adapt, and automate at machine-speed. Fo
19 October 2025 In October 2025, one of the most significant supply-chain-adjacent cybersecurity incidents in recent years came to light: the Seattle-based network security and application-delivery firm F5 admitted that a “highly sophisticated nation-state threat actor” had achieved long-term unauthorised access to
19 October 2025 On 15 October 2025, the UK Information Commissioner’s Office (ICO) imposed a combined £14 million penalty on outsourcing giant Capita plc and Capita Pension Solutions Limited for serious data protection failings linked to its 2023 cyber-attack. The ICO split the fine into £8m for Capita plc and £6m
19 October 2025 So, DCC is not just a one-off audit per contract; it’s a forward-looking assurance mechanism to streamline supplier cyber assurance across multiple contracts, reduce duplication, and raise baseline cyber maturity in the defence supply chain. The Four Levels of DCC There are four levels (0 to 3) unde
12 October 2025 In the fast-evolving world of cybersecurity, one principle remains constant: you can’t defend what you don’t understand. Cyber attackers continuously adapt their methods, refine their tools, and exploit new vulnerabilities often before businesses are even aware of them. This is where threat intellig
12 October 2025 Introduction Your organisation’s email domain is more than just an address it’s an extension of your brand, your reputation, and your trustworthiness in the digital world. Unfortunately, cybercriminals know this too. Fraudsters frequently register similar or deceptive domain names to impersonate leg
12 October 2025 In today’s connected world, our homes have become mini-offices, entertainment hubs, and digital classrooms. Whether you’re streaming your favourite series, working remotely, or managing smart devices, your home network is the central point that ties everything together. But with convenience comes ri
12 October 2025 Today businesses are under constant pressure to deliver software faster, smarter, and more securely. Yet, with the rise of cloud-native applications, continuous deployment, and agile methodologies, security often risks being left behind treated as a final checkpoint rather than an integral part of t
12 October 2025 Microsoft’s cadence for Windows 11 feature updates remains steady: one major update in the second half of each year. In 2025, that update is dubbed Windows 11 version 25H2, also known as the “2025 Update.” It continues a trend started with Windows 11 24H2: rather than being a full-scale rewrite, man
12 October 2025 Introduction The cybersecurity landscape has evolved dramatically over the past decade. Traditional perimeter-based defences once the cornerstone of corporate security are no longer sufficient to protect modern businesses from sophisticated cyber threats. Remote work, cloud computing, and supply cha
5 October 2025 On 30 September 2025, a key piece of U.S. cybersecurity legislation the Cybersecurity Information Sharing Act of 2015 (commonly abbreviated as “CISA 2015”) officially expired. Though passage of a short-term extension was considered, the law lapsed alongside a government funding shutdown. Its expir
5 October 2025 Introduction The discovery of a critical vulnerability in Salesforce’s AgentForce, dubbed ForcedLeak, has set off alarms in the enterprise technology and security world. It shows clearly that embedding AI agents within business systems is not just a matter of functionality or convenience it is now a
5 October 2025 The world of cyber security is constantly evolving, and with it, the demands on Security Operations Centres (SOCs) grow more complex. At the heart of a SOC lies its analysts and managers the professionals tasked with detecting, investigating, and responding to cyber threats. Many aspiring cyber secu
28 September 2025 Introduction Artificial Intelligence (AI) has quickly moved from futuristic concept to everyday reality. Once confined to research labs and science fiction films, AI now powers the tools and applications we use daily from voice assistants and chatbots to advanced analytics platforms. For businesses,
28 September 2025 In recent years, schools, colleges and other educational settings have become increasingly frequent targets for cyberattacks. These incidents range from data breaches and ransomware to insider misuse and distributed denial-of-service (DDoS) attacks. According to the UK Government’s Cyber Security Br
28 September 2025 Introduction Cyber attacks are no longer a distant possibility they are a daily reality for organisations of all sizes. From phishing emails and ransomware to sophisticated nation-state operations, the threat landscape continues to evolve at a rapid pace. For many business leaders, the question is n
28 September 2025 Introduction When we think of cyber attacks, images of ransomware encrypting entire networks or large-scale data breaches exposing millions of customer records often come to mind. Yet, one of the most damaging and widespread forms of cyber crime is far less technical, and far more reliant on human p
28 September 2025 In September 2025, the JavaScript/npm community has been rocked by one of the most serious security incidents in recent years. Dozens soon to be over a hundred npm packages have been compromised by malicious actors. These aren’t isolated incidents; they form part of a self-propagating supply-chain a
17 September 2025 Technology is at the core of almost every business operation today. Whether an organisation is in finance, healthcare, retail, or manufacturing, its success depends heavily on how effectively it leverages its technology stack. A tech stack the combination of programming languages, frameworks, tools,
14 September 2025 Introduction Artificial Intelligence (AI) is rapidly transforming the modern workplace, from predictive analytics in sales to automated cybersecurity defence. One of the most recent and popular innovations is the AI note-taker software tools that join your online meetings, transcribe discussions in
14 September 2025 In every cyber security circle, one term has steadily moved from being niche jargon to a central part of strategic discussions in boardrooms and security operations centres alike: Attack Surface Management (ASM). At its heart, ASM is about visibility and control. It answers the questions: What does
14 September 2025 Introduction For decades, cybersecurity was pigeonholed as a technical issue. It was something left to IT departments, buried deep in risk registers, and rarely discussed beyond the level of Chief Information Security Officers (CISOs). But as recent events in the UK demonstrate from Jaguar Land Rove
7 September 2025 Introduction When we think of cyber threats, most of us picture hoodie-clad hackers in dark rooms, sophisticated ransomware gangs, or state-backed espionage campaigns. Businesses often prioritise technical defences firewalls, intrusion detection systems, encryption, and endpoint monitoring. Yet, tim
26 August 2025 Introduction Artificial Intelligence (AI) is no longer the futuristic concept it once was. From fraud detection in banking to predictive maintenance in manufacturing, AI has woven itself into the fabric of modern society. But as with every technological leap forward, there is an equal and opposite r
26 August 2025 Introduction On 20 August 2025, Apple quietly rolled out emergency security patches for iOS, iPadOS and macOS. These updates iOS 18.6.2, iPadOS 18.6.2 (plus 17.7.10 for some older pads), macOS Sequoia 15.6.1, Sonoma 14.7.8 and Ventura 13.7.8 don’t include flashy new features. Instead, they fix a ser
25 August 2025 August 2025 has proven to be a critical month for cyber‑security, with several zero-day vulnerabilities disclosed and actively exploited across major platforms and software. Here’s a concise overview of the most significant cases and what they mean for users and organisations. 1. Windows Kerberos Ze
22 August 2025 In the fast-evolving cyber threat landscape, attackers are using increasingly sophisticated tactics to slip past traditional defences. Two terms have become central to modern security discussions HEAT (Highly Evasive Adaptive Threats) and CEM (Continuous Exposure Management). While HEAT describes th
21 August 2025 In today’s hyper-connected world, our smartphones rarely leave our sight. They’re alarm clocks, satnavs, fitness trackers, entertainment systems, shopping assistants and, increasingly, intelligence-gathering devices. Many people swear that their phone or laptop microphone is secretly listening to co
19 August 2025 In a world where data breaches, ransomware attacks, and phishing campaigns dominate the headlines, the need for robust cyber security training has never been greater. Yet the way organisations deliver that training has changed dramatically over the last decade. Traditional classroom sessions and pri
17 August 2025 1. Introduction: A Fraudster’s Perfect Storm Not so long ago, “deepfakes” were largely seen as an internet novelty celebrity face-swaps, viral memes, and questionable content lurking in online forums. But as with many emerging technologies, what begins as entertainment can rapidly be weaponised. Tod
16 August 2025 Introduction It’s early August 2025. WinRAR, one of the world’s most ubiquitous file‑compression tools, has just stumbled into the limelight not for its compression efficiency, but for a critical security flaw. A zero‑day vulnerability, officially registered as CVE‑2025‑8088, has been weaponised in
14 August 2025 In today’s complex and unpredictable business environment, organisations face a dizzying array of threats, from cyber attacks and supply chain disruptions to extreme weather events, regulatory changes, and geopolitical instability. While it is impossible to predict every single crisis that might str
13 August 2025 AI on Mobile Devices, Laptops, and Browsers – Detecting, Monitoring, and Reducing Risk for Your Business Artificial Intelligence (AI) is no longer a niche technology reserved for tech giants or research labs. From AI-driven productivity tools on mobile devices to browser-based assistants embedded in
12 August 2025 Introduction On 9 August 2025, The Hacker News broke a critical cybersecurity story: researchers at Cisco Talos disclosed a series of severe vulnerabilities in Dell’s ControlVault 3 firmware and associated Windows APIs, affecting over 100 laptop models. They dubbed these flaws ReVault a name that co
10 August 2025 Insights on workforce challenges from industry reports 🔐 Introduction Cybersecurity is one of the most critical functions in any modern organisation, yet it’s also one of the most understaffed, overworked, and emotionally drained. A 2025 report from (ISC)² estimates the global cybersecurity workfor
10 August 2025 Lessons from the Tea App Leak and AI‑Powered Development Pitfalls In 2025, a new social platform called Tea exploded onto the scene, promising to revolutionise content sharing with a blend of AI-powered discovery, pseudonymous communities, and “vibe‑based” user interaction. It attracted millions and
8 August 2025 In today’s hyperconnected economy, polyworking the trend of holding multiple concurrent jobs or freelance gigs is gaining momentum, especially among Gen Z professionals. While it signals a cultural shift in how young workers view employment, autonomy, and income generation, it also presents a clear
7 August 2025 In the digital age, where your online presence defines not only your career but also your credibility, LinkedIn has emerged as the professional’s platform of choice. With over 1 billion users globally, it’s where careers are built, networks are formed, and opportunities are discovered. However, lurk
6 August 2025 Zero Trust is no longer a buzzword or a futuristic concept. In 2025, it is a practical security model that businesses of all sizes must adopt to combat the ever-evolving cyber threat landscape. With identity breaches, ransomware attacks, and cloud misconfigurations on the rise, traditional perimeter
5 August 2025 In 2025, artificial intelligence (AI) is revolutionising both defence and offence in the cyber security landscape. While organisations leverage AI to detect threats faster and automate response, cybercriminals are doing the same and, in many cases, they’re moving faster. We are now facing a wave of
4 August 2025 As businesses adopt agile methodologies and shift to DevOps, software is built and deployed faster than ever. However, with this speed comes risk. The earlier security vulnerabilities are identified and resolved in the development lifecycle, the lower the cost and impact. Two key methodologies stand
3 August 2025 In a stark reminder of the growing cybersecurity challenges facing the automotive sector, researchers have disclosed a newly discovered set of vulnerabilities, collectively dubbed PerfektBlue which impact millions of vehicles manufactured by some of the world’s most prominent car brands, including M
2 August 2025 1. Introduction In July 2025, the UK Government, in partnership with the National Cyber Security Centre (NCSC), unveiled new legislation targeting ransomware payments. Under the proposals: This marks a significant shift in strategy from discouragement to prohibition in certain cases and has sparked
1 August 2025 The Online Safety Act 2023 represents one of the most significant updates to the UK’s internet legislation in recent years. Its stated purpose is to protect individuals, especially children, from harm online. As the Act comes into effect, a notable trend has emerged: a sharp increase in virtual priv
31 July 2025 As artificial intelligence tools continue to permeate the modern workplace, their use introduces a unique set of data protection, compliance, and security concerns. While these tools, ranging from large language models to autonomous agents offer productivity gains, they can also act as unregulated d
30 July 2025 Artificial Intelligence (AI) is all around us. From chatbots that answer customer questions, to search engines that summarise news stories, to voice assistants that help us manage our daily lives – AI is quickly becoming part of everyday experiences. But as impressive as these technologies may seem,
15 June 2025 In today’s fast-paced world, businesses need to deliver technology faster, safer, and more reliably than ever before. That’s where DevOps comes in, a way of working that helps teams build and release software better. But what is DevOps exactly? Let’s break it down, using simple terms and real-world
13 June 2025 In a world where digital infrastructure underpins nearly every aspect of modern healthcare, the cyber security of our health systems is not just a technical concern it’s a matter of national importance. In recognition of this, the NHS Cyber Security Charter has been developed as a foundational docum
12 June 2025 As cyber threats become increasingly complex, organisations that operate critical systems must demonstrate resilience against evolving risks. In the UK, the National Cyber Security Centre (NCSC) developed the Cyber Assessment Framework (CAF) to help organisations assess and improve their cyber resil
10 June 2025 This is a lot harder than you may think to actually do. In some cases, you will simply have to identify the risks and accept them. Take Microsoft for example, everyone uses them but how many have asked them to do a Supplier Due Diligence Questionnaire!! Introduction Most organisations rely heavily o
7 June 2025 Risk Management isn’t just another checkbox; it’s the compass that guides everything from strategy to operational security. Whether advising a growing SME or a large enterprise, selecting the right risk management methodology is critical for building a resilient security posture. With regulatory pre
7 June 2025 For private equity (PE) firms, the cyber resilience of portfolio companies directly impacts the overall value and exit potential of their investments. Yet, many firms still lack a standardised way to evaluate and enforce cybersecurity controls across their portfolio. In this blog post, we’ll explore
6 June 2025 In the cybersecurity world, where trust and competence are paramount, the CREST certification scheme for organisations serves as a vital benchmark. Recognised globally, CREST (Council of Registered Ethical Security Testers) accredits organisations that deliver high-quality, technically competent, an
4 June 2025 Introduction The Network and Information Security Directive, commonly known as NIS2, represents a significant advancement in the European Union’s efforts to bolster cyber security across its member states. As businesses increasingly rely on digital infrastructure, understanding and complying with NI
23 May 2025 In the world of cyber security, professionals are often seen as the unsung heroes, tirelessly working behind the scenes to protect sensitive data and maintain the integrity of digital infrastructures. However, this relentless vigilance can come at a significant cost: burnout. The Nature of Cyber Sec
20 May 2025 
