Opinion

By Marc de Beaucorps, Co-founder and CEO of Finovox The UK’s rollout of new digital IDs is being pitched as a straightforward upgrade involving safer age checks, smoother access, and fewer fakes. But from a fraud perspective, “simpler” can be a dangerous word. Identity fraud rarely disappears; it mutates. And when you digitize identity, you don’t just change the interface. You change the attack surface. Across England and Wales, pubs, bars and retailers have now...

By Alex Laurie, GTM CTO, Ping Identity Generative AI has made content creation effortless, but establishing where content originates - and whether it can be trusted - remains a critical security challenge. While AI vendors are introducing digital watermarking to improve visibility, provenance and trust are not the same thing. Knowing an image or document was generated by AI reveals its origin, but it tells us nothing about its accuracy, intent, or authorisation. Watermarking alone...

By Ansgar Dodt, VP Product Management for Software Monetization at Thales Not every piece of software is worth attacking. Traditionally, that has offered software vendors a degree of protection. Reverse engineering takes time, specialist expertise and persistence, forcing attackers to weigh the potential reward against the effort involved. However, AI is beginning to change that trade-off. Recent AI-powered security incidents, including cases disclosed by OpenAI and Anthropic, suggest this is not a one-off development but...

James Gillies, Head of Cyber Security at Logicalis UKI There is no escaping the fact that AI is creating significant opportunities for cybersecurity teams, from analysing security data and identifying suspicious activity to accelerating detection, response and remediation. However, the same capabilities are also changing the threat landscape. This comes at a time when security teams are already under considerable pressure, with recent research showing that 77% of organisations experienced a cybersecurity incident in the...

By Matthew Brady, Senior Security Engineering Manager, Black Duck As of September 11, 2026, Article 14 of the EU Cyber Resilience Act (CRA) is in force. Manufacturers, importers, and distributors of products with digital elements sold into the EU must notify ENISA or their national CSIRT within 24 hours of learning that a vulnerability is being actively exploited, with a mitigation report due in 72 hours and a full analysis due within two weeks. This...

By James Mackay, CEO, MetaCompliance When security teams think about their organisation's attack surface, they're usually focused on technology. Where could an attacker get in? What's exposed? What hasn't been updated or configured correctly? An attack surface refers to all the possible ways a cyber attacker can gain access to an organisation, including unpatched security software, misconfigured cloud storage, open system connections, and traditional phishing emails containing fraudulent links. However, organisations also have an invisible...

By Myles Bray, CEO of CyberSentriq. When it comes to cybersecurity, discussions often centre on technical capabilities, tooling and attacker tactics, but often overlooks the employees and security teams the strategy is intended to protect. The reality is that most critical business functions from staff payroll to procurement and more have now moved online across digital applications, cloud environments and CRMs. With this comes the intense responsibility of ensuring they work as intended and that...

Christopher Clark, Cyber Security Incident Response Team Director, Thrive  Geopolitical escalation can become a cyber security problem for businesses far more quickly than many boards expect. The National Cyber Security Council (NCSC) has warned that UK critical infrastructure faced more than 200 cyber incidents over the past year, with around three-quarters believed to be linked to state actors. Analysis of the conflict involving Iran has also found cyber retaliation following military escalation within hours, bringing...

Artificial intelligence is changing vulnerability discovery. At OpenSSL, we are seeing that change first-hand. A year ago, our security address received around nine separate reports and enquiries a month. It now receives around 70. AI tools can examine source code and identify potential security issues at a scale that would previously have required significant human effort. In many ways, that's positive. Finding vulnerabilities is an essential part of making software more secure. But there is...

By Aimee Steele, threat intelligence analyst at Talion Cyber Security Last month, the UK’s National Cyber Security Centre (NCSC) issued an advisory around a new phishing campaign targeting organisations in the West that was being carried out by the Russian state-sponsored threat actor known as Laundry Bear. The campaign, saw the threat actors exploiting a zero-day vulnerability in Zimbra Collaboration Suite in order to compromise networks, before gaining persistence, accessing emails, stealing sensitive data and...