So, DCC is not just a one-off audit per contract; it’s a forward-looking assurance mechanism to streamline supplier cyber assurance across multiple contracts, reduce duplication, and raise baseline cyber maturity in the defence supply chain. The Four Levels of DCC There are four levels (0 to 3) unde
12 October 2025 In the fast-evolving world of cybersecurity, one principle remains constant: you can’t defend what you don’t understand. Cyber attackers continuously adapt their methods, refine their tools, and exploit new vulnerabilities often before businesses are even aware of them. This is where threat intellig
12 October 2025 Introduction Your organisation’s email domain is more than just an address it’s an extension of your brand, your reputation, and your trustworthiness in the digital world. Unfortunately, cybercriminals know this too. Fraudsters frequently register similar or deceptive domain names to impersonate leg
12 October 2025 Today businesses are under constant pressure to deliver software faster, smarter, and more securely. Yet, with the rise of cloud-native applications, continuous deployment, and agile methodologies, security often risks being left behind treated as a final checkpoint rather than an integral part of t
12 October 2025 Introduction The cybersecurity landscape has evolved dramatically over the past decade. Traditional perimeter-based defences once the cornerstone of corporate security are no longer sufficient to protect modern businesses from sophisticated cyber threats. Remote work, cloud computing, and supply cha
5 October 2025 Introduction Artificial Intelligence (AI) has rapidly evolved from a promising technological tool into a transformative force reshaping industries, economies, and societies. Yet, as with every major innovation, AI’s immense potential brings new and complex risks. The same algorithms that power auton
5 October 2025 On 30 September 2025, a key piece of U.S. cybersecurity legislation the Cybersecurity Information Sharing Act of 2015 (commonly abbreviated as “CISA 2015”) officially expired. Though passage of a short-term extension was considered, the law lapsed alongside a government funding shutdown. Its expir
5 October 2025 Introduction In July 2025, the UK government unveiled plans to introduce a targeted ban on ransomware payments by public sector bodies and regulated operators of critical national infrastructure (CNI). This represents a significant shift in the state’s approach to cyber-extortion: instead of mere g
5 October 2025 In October 2025, cybersecurity media lit up with headlines like “Many Cisco ASA firewalls still unsecure, hackers claim Red Hat’s GitLab breach”. These stories link two seemingly distinct issues zero-day vulnerabilities in Cisco’s Adaptive Security Appliance (ASA) line, and claims of massive data e
5 October 2025 Introduction The discovery of a critical vulnerability in Salesforce’s AgentForce, dubbed ForcedLeak, has set off alarms in the enterprise technology and security world. It shows clearly that embedding AI agents within business systems is not just a matter of functionality or convenience it is now a
5 October 2025 In late September and early October 2025, the cybersecurity world was jolted by reports of a massive extortion campaign sweeping across the United States. Executives at multiple organisations spanning industries and geographies have received threatening emails claiming that cybercriminals have stole
5 October 2025 The world of cyber security is constantly evolving, and with it, the demands on Security Operations Centres (SOCs) grow more complex. At the heart of a SOC lies its analysts and managers the professionals tasked with detecting, investigating, and responding to cyber threats. Many aspiring cyber secu
28 September 2025 Introduction Cyber attacks are no longer a distant possibility they are a daily reality for organisations of all sizes. From phishing emails and ransomware to sophisticated nation-state operations, the threat landscape continues to evolve at a rapid pace. For many business leaders, the question is n
28 September 2025 Introduction When we think of cyber attacks, images of ransomware encrypting entire networks or large-scale data breaches exposing millions of customer records often come to mind. Yet, one of the most damaging and widespread forms of cyber crime is far less technical, and far more reliant on human p
28 September 2025 Technology is at the core of almost every business operation today. Whether an organisation is in finance, healthcare, retail, or manufacturing, its success depends heavily on how effectively it leverages its technology stack. A tech stack the combination of programming languages, frameworks, tools,
14 September 2025 In the modern industrial landscape, technology is no longer confined to the office or the data centre. It now permeates factories, refineries, power plants, water treatment facilities, and transportation networks. The systems and equipment that keep these critical industries running rely not only on
14 September 2025 Introduction Artificial Intelligence (AI) is rapidly transforming the modern workplace, from predictive analytics in sales to automated cybersecurity defence. One of the most recent and popular innovations is the AI note-taker software tools that join your online meetings, transcribe discussions in
14 September 2025 In every cyber security circle, one term has steadily moved from being niche jargon to a central part of strategic discussions in boardrooms and security operations centres alike: Attack Surface Management (ASM). At its heart, ASM is about visibility and control. It answers the questions: What does
14 September 2025 Introduction On 6 September 2025, the world was reminded of the fragility of our hyper-connected digital society. Multiple undersea fibre-optic cables in the Red Sea were severed, cutting into one of the world’s most critical data arteries. The incident caused widespread internet disruptions across
7 September 2025 Introduction In August 2025, a far-reaching cyberattack exploited the Drift chatbot service owned by Salesloft and its integrations with platforms like Salesforce. This incident marked one of the largest SaaS supply-chain breaches in recent times, touching over 700 organisations including global nam
7 September 2025 Introduction Every year, the UK’s CYBERUK conference, hosted by the National Cyber Security Centre (NCSC), brings together government leaders, private sector executives, academics, and security professionals. It is the flagship event for the UK’s cybersecurity community, and the 2025 edition in Manc
7 September 2025 Introduction Artificial intelligence (AI) is reshaping the retail industry in ways both exciting and alarming. On the one hand, retailers are using AI to personalise customer experiences, forecast demand, and streamline logistics. On the other hand, cybercriminals are exploiting the same technology
7 September 2025 Introduction The UK is facing a cybersecurity paradox. On one hand, the volume and sophistication of cyber threats are escalating powered by artificial intelligence, state-sponsored espionage, and criminal syndicates. On the other hand, the country lacks enough skilled professionals to defend agains
7 September 2025 Introduction In September 2025, the UK government confirmed a doubling of “nationally significant” cyberattacks compared with the previous year. The announcement, supported by analysis from GCHQ and the National Cyber Security Centre (NCSC), paints a troubling picture: Britain is facing a new wave o
7 September 2025 Introduction Few things expose the fragility of modern business operations more starkly than a sudden, paralysing cyberattack. In early September 2025, Jaguar Land Rover (JLR) one of Britain’s most iconic automotive manufacturers was forced to suspend operations across multiple plants due to a sever
7 September 2025 Introduction For years, cybersecurity strategy has focused on defending against external adversaries ransomware groups, state-sponsored hackers, and cybercriminal syndicates. Yet, some of the most damaging breaches in history have come from the inside. Whether malicious, negligent, or coerced, insid
30 August 2025 Introduction In 2019, a UK-based energy firm was defrauded of £200,000 after cybercriminals used AI-generated audio to impersonate the CEO’s voice. At the time, the story was dismissed by some as an anomaly a proof of concept rather than a genuine, scalable threat. Fast forward to 2025, and deepfake
30 August 2025 Introduction Malware naming often evokes seriousness terms like Emotet, Ryuk, and BlackEnergy carry connotations of menace and precision. But sometimes, attackers deliberately adopt unusual or even humorous labels to disarm, confuse, or taunt defenders. In 2025, researchers identified a new Mirai va
30 August 2025 Introduction Endpoint Detection and Response (EDR) and Antivirus (AV) solutions have become the backbone of modern cyber defence. They promise to spot anomalies, block malicious files, and prevent attackers from gaining a foothold inside corporate networks. Yet, as defenders evolve, so too do advers
30 August 2025 Introduction Open-source has long been celebrated as the beating heart of modern software development. Developers worldwide contribute to, improve, and rely upon repositories on platforms such as GitHub, GitLab, and Bitbucket. This global collaboration has accelerated innovation, democratised access
30 August 2025 Introduction In the constantly evolving landscape of cyber security, defenders face an increasingly complex challenge. While many people envision attackers armed with advanced malware and bespoke exploit kits, a large proportion of modern cyber attacks rely on something far subtler: the tools that a
26 August 2025 Introduction In mid-2025, headlines across global news outlets claimed that hackers had obtained a database containing credentials for 16 million PayPal accounts. Panic spread rapidly. Social media lit up with warnings, and cybersecurity forums buzzed with speculation. Some users immediately rushed
26 August 2025 Introduction Diplomats are some of the most security-conscious individuals on the planet. They represent governments abroad, negotiate sensitive treaties, and handle intelligence of immense geopolitical value. Yet in early 2025, reports surfaced that a China-linked cyber espionage group UNC6384 had
26 August 2025 Introduction For decades, encryption has been the silent guardian of the digital world. From online banking and medical records to WhatsApp conversations and government secrets, encryption underpins almost everything we do online. Without it, trust in the digital economy would collapse overnight. Bu
26 August 2025 Introduction When we think of cyber threats, most of us picture hoodie-clad hackers in dark rooms, sophisticated ransomware gangs, or state-backed espionage campaigns. Businesses often prioritise technical defences firewalls, intrusion detection systems, encryption, and endpoint monitoring. Yet, tim
26 August 2025 Introduction Artificial Intelligence (AI) is no longer the futuristic concept it once was. From fraud detection in banking to predictive maintenance in manufacturing, AI has woven itself into the fabric of modern society. But as with every technological leap forward, there is an equal and opposite r
26 August 2025 Introduction On 20 August 2025, Apple quietly rolled out emergency security patches for iOS, iPadOS and macOS. These updates iOS 18.6.2, iPadOS 18.6.2 (plus 17.7.10 for some older pads), macOS Sequoia 15.6.1, Sonoma 14.7.8 and Ventura 13.7.8 don’t include flashy new features. Instead, they fix a ser
25 August 2025 In the ever-evolving landscape of technology, artificial intelligence (AI) is no longer just a buzzword it’s an essential tool that is actively reshaping the way we work. For many, the conversation around AI has been dominated by fears of job displacement and automation. But there’s a more empowerin
24 August 2025 Stepping into the role of a Chief Technology Officer (CTO) or Technical Director is often the culmination of years of technical mastery, leadership experience, and business acumen. It is a position that bridges the world of technology with the wider commercial strategy of a business, requiring equal
22 August 2025 August 2025 has proven to be a critical month for cyber‑security, with several zero-day vulnerabilities disclosed and actively exploited across major platforms and software. Here’s a concise overview of the most significant cases and what they mean for users and organisations. 1. Windows Kerberos Ze
22 August 2025 In the fast-evolving cyber threat landscape, attackers are using increasingly sophisticated tactics to slip past traditional defences. Two terms have become central to modern security discussions HEAT (Highly Evasive Adaptive Threats) and CEM (Continuous Exposure Management). While HEAT describes th
21 August 2025 Organisations of all sizes are facing cyber threats that just keep evolving faster than ever. From phishing emails and ransomware attacks to insider threats and nation-state hacking campaigns, the security landscape is constantly shifting. For organisations of any size, keeping up with this complexi
17 August 2025 Release Date: 12 August 2025 Applicable Version: Windows 11 version 24H2 Build Number: 10.0.26100.4946 (OS Build) Patch ID: KB5063878 1. Context and Significance Every second Tuesday of the month, Microsoft delivers its highly anticipated Patch Tuesday updates. In August 2025, this rollout encompass
15 August 2025 Introduction It’s early August 2025. WinRAR, one of the world’s most ubiquitous file‑compression tools, has just stumbled into the limelight not for its compression efficiency, but for a critical security flaw. A zero‑day vulnerability, officially registered as CVE‑2025‑8088, has been weaponised in
14 August 2025 Executive summary Fortinet has disclosed and patched a critical OS command injection vulnerability in FortiSIEM, tracked as CVE-2025-25256. It scores CVSS 9.8 (critical) and can be exploited without authentication or user interaction via specially crafted CLI requests against a FortiSIEM service. Fo
13 August 2025 In today’s complex and unpredictable business environment, organisations face a dizzying array of threats, from cyber attacks and supply chain disruptions to extreme weather events, regulatory changes, and geopolitical instability. While it is impossible to predict every single crisis that might str
13 August 2025 AI on Mobile Devices, Laptops, and Browsers – Detecting, Monitoring, and Reducing Risk for Your Business Artificial Intelligence (AI) is no longer a niche technology reserved for tech giants or research labs. From AI-driven productivity tools on mobile devices to browser-based assistants embedded in
12 August 2025 In today’s cyber threat landscape, no organisation – large or small – is immune to attack. From ransomware incidents targeting local councils to state-sponsored cyber espionage campaigns against multinational corporations, every business is a potential target. While many organisations already invest
11 August 2025 Introduction On 9 August 2025, The Hacker News broke a critical cybersecurity story: researchers at Cisco Talos disclosed a series of severe vulnerabilities in Dell’s ControlVault 3 firmware and associated Windows APIs, affecting over 100 laptop models. They dubbed these flaws ReVault a name that co
10 August 2025 The UK’s National Cyber Security Centre (NCSC) has officially released version 4.0 of the Cyber Assessment Framework (CAF) a significant update that reflects the changing cyber threat landscape, technological advancements, and evolving regulatory needs. With CAF becoming the de facto benchmark for a
7 August 2025 In today’s hyperconnected economy, polyworking the trend of holding multiple concurrent jobs or freelance gigs is gaining momentum, especially among Gen Z professionals. While it signals a cultural shift in how young workers view employment, autonomy, and income generation, it also presents a clear
7 August 2025 In the digital age, where your online presence defines not only your career but also your credibility, LinkedIn has emerged as the professional’s platform of choice. With over 1 billion users globally, it’s where careers are built, networks are formed, and opportunities are discovered. However, lurk
6 August 2025 In 2025, artificial intelligence (AI) is revolutionising both defence and offence in the cyber security landscape. While organisations leverage AI to detect threats faster and automate response, cybercriminals are doing the same and, in many cases, they’re moving faster. We are now facing a wave of
4 August 2025 In a stark reminder of the growing cybersecurity challenges facing the automotive sector, researchers have disclosed a newly discovered set of vulnerabilities, collectively dubbed PerfektBlue which impact millions of vehicles manufactured by some of the world’s most prominent car brands, including M
2 August 2025 1. Introduction In July 2025, the UK Government, in partnership with the National Cyber Security Centre (NCSC), unveiled new legislation targeting ransomware payments. Under the proposals: This marks a significant shift in strategy from discouragement to prohibition in certain cases and has sparked
1 August 2025 As artificial intelligence tools continue to permeate the modern workplace, their use introduces a unique set of data protection, compliance, and security concerns. While these tools, ranging from large language models to autonomous agents offer productivity gains, they can also act as unregulated d
30 July 2025 As of 2025, Microsoft Sentinel has taken a significant step forward in how it handles security data with the introduction of the Microsoft Sentinel Data Lake, a purpose-built security data platform. This development is a response to the growing demand from organisations seeking cost-effective, high-
29 July 2025 Introduction Microsoft has announced a major shift in its cloud-native security information and event management (SIEM) approach by integrating Microsoft Sentinel into the Unified Security Operations Platform (USOP) within the Microsoft Defender ecosystem. As a Cyber Security Engineer working closel
29 July 2025 In our previous blog, we explored DevOps a way of working that helps teams build and release software faster and more reliably through better collaboration. But building and running software is only part of the story. In today’s digital world, we also need to protect it. That’s where SecOps comes in
14 June 2025 In today’s fast-paced world, businesses need to deliver technology faster, safer, and more reliably than ever before. That’s where DevOps comes in, a way of working that helps teams build and release software better. But what is DevOps exactly? Let’s break it down, using simple terms and real-world
13 June 2025 In a world where digital infrastructure underpins nearly every aspect of modern healthcare, the cyber security of our health systems is not just a technical concern it’s a matter of national importance. In recognition of this, the NHS Cyber Security Charter has been developed as a foundational docum
12 June 2025 In today’s digital-first economy, UK small businesses are more vulnerable to cyber threats than ever. With limited budgets, minimal in-house security expertise, and increasing digital dependencies, cybercriminals are actively targeting SMEs for financial gain, data theft, and disruption. This post e
11 June 2025 As cyber threats become increasingly complex, organisations that operate critical systems must demonstrate resilience against evolving risks. In the UK, the National Cyber Security Centre (NCSC) developed the Cyber Assessment Framework (CAF) to help organisations assess and improve their cyber resil
10 June 2025 The Cybersecurity Maturity Model Certification (CMMC) is a framework developed by the U.S. Department of Defense (DoD) to enhance cybersecurity practices across its supply chain. While primarily a U.S. initiative, CMMC has significant implications for UK businesses, especially those involved in the
8 June 2025 For private equity (PE) firms, the cyber resilience of portfolio companies directly impacts the overall value and exit potential of their investments. Yet, many firms still lack a standardised way to evaluate and enforce cybersecurity controls across their portfolio. In this blog post, we’ll explore
6 June 2025 The Defence Cyber Certification (DCC) is a newly introduced cybersecurity certification framework developed by the UK Ministry of Defence (MOD) in collaboration with IASME. It is designed to enhance the cyber resilience of the UK’s defence supply chain by providing a structured, organisation-wide as
6 June 2025 In recent years, Operational Technology (OT) has rapidly evolved from isolated, air-gapped systems to complex, interconnected networks integral to the manufacturing process. As a threat researcher immersed in monitoring and analysing industrial threats, I’ve seen first-hand how the convergence of OT
5 June 2025 In the cybersecurity world, where trust and competence are paramount, the CREST certification scheme for organisations serves as a vital benchmark. Recognised globally, CREST (Council of Registered Ethical Security Testers) accredits organisations that deliver high-quality, technically competent, an
4 June 2025 Web applications serve as critical interfaces for businesses to interact with customers, process transactions, and manage data. However, these same applications have become prime targets for cyberattacks. From SQL injection to cross-site scripting (XSS) and zero-day vulnerabilities, attackers relent
2 June 2025 As artificial intelligence (AI) and large language models (LLMs) become more widely adopted across industries, the methods by which these models receive, retain, and utilise context have grown in importance. A newer concept entering the discourse is the Model Context Protocol (MCP) a method for stru
1 June 2025 Organisations increasingly rely on a vast and growing ecosystem of internet-facing assets web servers, APIs, cloud services, mobile apps, and more. While these technologies offer incredible agility and scalability, they also expand what cybersecurity experts refer to as the “attack surface.” Externa
31 May 2025 The terms EDR, MDR, and XDR are frequently used sometimes interchangeably and often confusingly. Each plays a crucial role in modern cyber defence, yet they serve different functions and cater to different organisational needs. This blog post will demystify these acronyms, explain their core functio
30 May 2025 Introduction Ransomware remains one of the most devastating and common threats facing organizations today. To ensure teams are ready to respond effectively, running a tabletop exercise is essential. This structured, discussion-based simulation allows stakeholders to walk through a hypothetical incid
27 May 2025 Extended Detection and Response (XDR) solutions have become essential tools for modern cyber security, offering comprehensive protection across endpoints, networks, and cloud environments. Here, we compare the top 10 XDR solutions available in 2025, highlighting their features, pros, cons, and provi
26 May 2025 Microsoft 365 is a comprehensive suite of cloud-based services that includes Office applications, email, collaboration tools, and more. Ensuring the security of your Microsoft 365 tenant is crucial to protect sensitive data and maintain compliance with industry standards. This blog post will guide y
22 May 2025 The Digital Operational Resilience Act (DORA) is a significant regulation introduced by the European Union to enhance the digital resilience of financial entities. This regulation, which came into effect on January 17, 2025, aims to ensure that banks, insurance companies, investment firms, and other
19 May 2025 The National Cyber Security Centre (NCSC) has developed the Cyber Assessment Framework (CAF) to help these organisations achieve and demonstrate an appropriate level of cyber resilience. This blog post delves into the intricacies of the CAF, its components, and its significance. Introduction to the
17 May 2025 The National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF) is a comprehensive guide designed to help organisations manage and mitigate cyber security risks. This framework is widely recognised and adopted across various industries due to its flexibility, scalability, an
16 May 2025 Here are 10 advanced KQL (Kusto Query Language) queries that can be used in Microsoft Sentinel for enhanced security monitoring and threat detection. Each query is designed to address specific security scenarios and provide actionable insights. 1. Detecting Suspicious PowerShell Activity This query
15 May 2025 In the ever-evolving landscape of cyber security, frameworks like MITRE ATT&CK and MITRE D3FEND have become indispensable tools for both offensive and defensive strategies. These frameworks provide a structured approach to understanding and mitigating cyber threats, making them essential for cyber s
15 May 2025 Microsoft Sentinel is a powerful, cloud-native security information and event management (SIEM) solution that provides intelligent security analytics and threat intelligence across the enterprise. One of the key features of Microsoft Sentinel is its use of Kusto Query Language (KQL) for querying and
14 May 2025 The UK Cyber Security Council (UK CSC) plays a pivotal role in shaping the cyber security profession within the United Kingdom. Established to support the professional development of those working in or aspiring to work in cyber security, the UK CSC ensures that professionals operate with credibilit
13 May 2025 The Trusted Platform Module (TPM) stands as a cornerstone for ensuring the integrity and security of computing devices. This blog post delves into the technical intricacies of TPM, exploring its components, functionalities, and applications. What is a TPM? A Trusted Platform Module (TPM) is a specia
12 May 2025 One of Microsoft’s latest offerings, Microsoft Recall, has garnered significant attention for its potential to revolutionise how users interact with their digital environments. However, with great power comes great responsibility, and the introduction of Microsoft Recall has raised several security
12 May 2025 Information is more accessible than ever before. This accessibility has given rise to a powerful tool known as Open Source Intelligence, or OSINT. For security analysts, OSINT is an invaluable resource that helps in gathering information from publicly available sources to support decision-making pro
11 May 2025 With the increasing number of cyber threats, it is essential for organisations to have a robust security posture. Microsoft Secure Score is a powerful tool designed to help businesses assess and improve their security posture across Microsoft 365 workloads. This blog post will provide an in-depth lo
9 May 2025 Cyber security is a critical concern for businesses of all sizes. With the increasing number of cyber threats, it is essential for organisations to proactively identify and address vulnerabilities in their systems. Two common methods used to assess and improve cyber security are penetration testing
8 May 2025 As we navigate through 2025, the cybersecurity landscape continues to evolve, with ransomware remaining a significant threat to organisations worldwide. Here, we delve into the top five ransomware groups currently making headlines and provide a summary of their Tactics, Techniques, and Procedures (T
5 May 2025 One of the biggest issues companies face is managing a diverse array of devices and ensuring their security is a significant challenge for IT departments. Microsoft Intune, a cloud-based endpoint management solution, offers a robust Mobile Device Management (MDM) and Mobile Application Management (M
4 May 2025 https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-320a With the continuing cyber attacks and ransomware there is one group has emerged as particularly notorious for its sophisticated and relentless attacks: the Scattered Spider group. Also known by various aliases such as Starfraud, UNC
2 May 2025 Due to the ever increasing sophistication of cyber threats, organisations must adopt proactive measures to safeguard their assets and data. One of the most critical components of a robust cyber security strategy is Threat Intelligence (TI). This blog post delves into the significance of Threat Intel
2 May 2025 In today’s fast-paced digital landscape, automation frameworks have become indispensable tools for businesses looking to streamline operations, enhance productivity, and reduce manual workloads. By automating repetitive tasks, companies can focus on more strategic initiatives, ultimately driving gro
1 May 2025 Introduction In today’s digital landscape, cyber security threats are evolving at an unprecedented pace. Businesses face constant challenges in securing their assets, data, and infrastructure against cyber attacks. A Security Operations Centre (SOC) plays a crucial role in detecting, analysing, and
30 April 2025 
