Data Protection

Bring your own device (BYOD) arrangements can help organisations work with contractors, staff who travel, and employees who prefer their own hardware. The tradeoff is straightforward. Company systems are accessed from machines that IT did not buy, configure, or repair. Some will be patched late. Others may be shared at home or used on networks the organisation cannot see. The risk is not limited to the laptop. Vulnerability exploitation now accounts for 31% of breaches,...

Annual audits used to define ISO 27001 compliance. A company would scramble for weeks, pull together evidence binders, pass the audit, and forget about the ISMS until the next surveillance visit. That cycle is collapsing. The ICO's enforcement appetite is growing. As UK procurement contracts increasingly mandate current certification, the October 2025 deadline for transitioning from the 2013 standard to ISO 27001:2022 has already passed. That means many organisations still running outdated controls face uncomfortable...

Certes has released new research showing that many organizations remain unprepared for the security risks posed by quantum computing, despite growing awareness of the threat. According to the company’s Emerging PQC Imperative report, 78% of organizations believe legacy systems represent their biggest quantum security risk. The findings highlight growing concerns that outdated infrastructure and applications could leave sensitive data exposed as quantum computing capabilities advance. The study, conducted by Freeform Dynamics and commissioned by Certes,...

Cost talk around servers tends to rot into slogans. “Cloud is cheaper.” “Dedicated is safer.” “Shared is fine.” None of that pays a bill. A business saves money on a VPS only when someone counts the boring parts: the monthly plan, storage add-ons, bandwidth overages, time spent on updates, outages that eat revenue and developer hours lost. "Is the cloud slow today?” Annual savings live in those details. One clean comparison across twelve months can...

In January 2026, Martin Kuchar, one of the organisers of BTC Prague, received a message on Telegram. A familiar contact, a compromised account, a familiar context, an invitation to jump on a call. The link led to a page visually identical to Zoom. What followed was the standard script: audio issues, a prompt to install an update. That was all it took. This is not phishing in the classical sense. There is no suspicious email...

Modern trading apps have opened up global financial markets to UK investors like never before. Today, these platforms process billions of data points daily, making the security of live data a massive technical challenge. The High Stakes of Real-Time Trading Data When traders interact with a chart, they rely on the accuracy of the price quote to make split-second decisions. If a data feed suffers from high latency or is manipulated, it creates a discrepancy...

Global businesses are racing to deploy artificial intelligence, sometimes at the expense of their cybersecurity postures. The rise of “agentic AI” is especially notable, due to its potential to automate business workflows, cloud operations, engineering tasks and cybersecurity. Not only are AI agents getting more capable, but they can also work much faster than humans, without taking breaks or needing days off. Companies can get more work done at lower costs, and in some cases...

Cloud security has become one of the defining challenges for enterprise security teams. As organisations scale across multiple cloud providers, deploy AI-driven workloads, and operate with increasingly distributed teams, the attack surface continues to expand. The issue is no longer just visibility, it is maintaining consistent control across fragmented environments. Siloed tools, misaligned policies, and alert fatigue are creating gaps that attackers actively exploit. To address this, enterprises are moving toward cloud security platforms that...

Starbucks has disclosed a data breach that exposed the personal information of hundreds of employees after attackers gained unauthorized access to internal employee accounts. In a filing with the Maine Attorney General, the coffee giant said it discovered the incident on February 6 and that 889 individuals were affected. The breach involved accounts tied to Starbucks Partner Central, the internal platform employees use to manage employment information, benefits, and HR-related services. Starbucks operates nearly 41,000...

Mobile app permissions are rarely as innocent as they appear. Behind every "Allow" button lies a potential attack vector, one that security teams increasingly struggle to contain. As apps grow more complex and data-hungry, the gap between what permissions are needed and what permissions are requested continues to widen. For cybersecurity professionals, this isn't a small concern. Permission misuse is now the main mechanism for malware distribution, data exfiltration, and device compromise. Understanding exactly where...