Intelligence Hub

Cyber criminals don’t necessarily choose businesses. They choose opportunities. Imagine you were a cyber criminal looking for your next target. You wouldn’t necessarily start by looking for the biggest company, the most recognisable brand or the business with the most money. You’d start by looking for an opportunity. An application that hasn’t been patched. A

Your employee clicks a link.  They enter their username and password. A familiar MFA prompt appears. They enter the code. And just like that, the attacker has what they need. They have walked in through the front door.  This is not a failure of the employee and it doesn’t necessarily mean your MFA solution has

Your IT team tells you everything is fine. Your computers are working. Your Microsoft 365 is working. Your firewall is working. Your backups are running. So you assume you’re secure. But here’s the uncomfortable question: What if you’re not? This isn’t an attack on your IT team. In fact, your IT people may be doing an

There is a dangerous belief that still exists in business. “We’re too small. Why would a hacker bother with us?” It might have been a reasonable assumption years ago, but it isn’t anymore. In fact, I would argue that thinking your business is too small to be attacked is now one of the biggest cyber

You pay the premium. You have the policy.  So surely, if something goes wrong, you’re covered? Not necessarily. This is something many businesses don’t think about until they’re trying to make a claim. Your cyber insurance policy may assume that certain security controls are already in place. MFA. Backups. Endpoint protection. Access controls. Patching. Monitoring.

For years, businesses were told that cyber security was relatively simple. Put a firewall around the network, install antivirus on the computers, keep everything patched, don’t click suspicious links and job done.  Except the world has changed. The attackers have changed. The threat has changed. The way we defend cannot stay the same. Firewalls and

Most businesses imagine a cyber attack as a loud and active event. The attackers gain entry to the systems and the lights go off, computers go dark and alarms ring while they deliver the attacker’s ransom demands. The IT team are running in circles, the executives barricade themselves in a boardroom and chaos immediately ensues. 

It doesn’t have to be.  About a year ago I wrote that cyber resilience wasn’t a technology trend. It was a business necessity. Twelve months later, I wish I’d been wrong. In the last year we’ve watched some of the UK’s biggest organisations brought to their knees by cyber criminals. Household names, including Marks & Spencer,

Every week there’s another headline about AI. There is so much noise that most people are lost, and keep focusing on the AI itself. have no idea where they stand.  Every week businesses ask me the same question in relation to cyber security: “How worried should we be about AI?” I think that’s the wrong

There’s been a lot of discussion recently about AI becoming capable of launching cyber attacks autonomously.  It’s an extraordinary development. Researchers have demonstrated AI systems capable of planning attacks, identifying weaknesses, chaining exploits together and achieving objectives with minimal human intervention and the freaky part is that this was during a “controlled evaluation”. This tells