Featured

Last week, Rebecca Taylor, Threat Intelligence Knowledge Manager and Researcher at Sophos, and Amelia Hewitt, Director of Cyber Consulting at Principle Defence and Founder of CybAid, released their second co-authored book Resilient You: An Agony Aunts’ Guide To Keeping It Together. The book is a follow up to their 2025 book Securely Yours. The book is a practical Agony Aunt-style guide for individuals wanting to build resiliency into their careers. The independently published book was...

Most people understand what it means to protect a human identity because the dangers of someone impersonating you online or stealing and cloning your card are immediately obvious. Today, organisations rely on thousands of non-human identities that belong to software applications, cloud workloads, APIs, bots, and now AI agents as well, which can affect almost everyone if compromised. So, what happens when a cyber attacker hijacks the identity of an autonomous agent. Meet the invisible...

Cyber is no longer a supporting capability. It now shapes how defence organisations plan, assess and act. Across NATO and allied forces, cyber intelligence is increasingly embedded into operational planning, from situational awareness through to targeting and strategic decision-making. At the same time, the threat landscape is becoming more complex. State-aligned actors are more active, campaigns are more coordinated, and the line between cyber and conventional operations continues to blur. Cyber operations in Ukraine have...

Cyber attackers are increasingly sidestepping traditional security tools by exploiting users themselves, according to Bridewell’s newly released Cyber Threat Intelligence Report 2026.  The report highlights a significant shift in attacker behaviour, with threat actors moving away from malware-heavy campaigns towards identity-driven and socially engineered attacks that operate within trusted systems, often leaving little trace for security tools to detect. Gavin Knapp, Head of Cyber Threat Intelligence at Bridewell, said the findings point to a fundamental...

New behavioural data from Redflags has revealed a striking concentration of AI tool usage within UK organisations: just 3% of employees account for 18% of all AI-related activity on work devices, averaging 235 AI events each, compared with 35 for a typical colleague. The findings come from the Redflags Behavioural Impact Report 2026, which draws on real, on-device telemetry rather than self-reported surveys, a distinction that matters. The report analyses over 29 million behavioural nudges...

Phillip Wylie is an internationally recognised cybersecurity expert, ethical hacker and offensive security specialist with more than 28 years’ experience across IT, network security, application security, penetration testing, red teaming and social engineering.  As co-author of The Pentester BluePrint, founder of The Pwn School Project and host of The Phillip Wylie Show, Phillip has built his career around making complex security risks easier to understand without stripping away the technical reality. His work focuses on the gaps organisations...

Economic pressures are pushing cybersecurity down the priority list for many SMBs according to The CyberSmart MSP Survey 2026. Notably,  46% of MSP customers are more concerned about operational challenges such as rising costs and inflation than cybersecurity risks, despite increasing threats. Meanwhile, MSPs themselves identified AI-driven threats as their top security concern for the second consecutive year. The 2026 research, conducted by OnePoll, features insights from 350 MSP leaders across the UK and Ireland,...

By Peter Villiers, Director of Cyber Risk at Barrier Networks There’s a growing risk across the UK’s Critical National Infrastructure (CNI) that is placing the country at serious risk of disruption. It isn’t ransomware or a headline-grabbing data breach. It sits within the systems that keep the country running. The risk is growing over time, because when these systems were first introduced, the risk didn’t exist. Yet today, because of advances in technology and connectivity,...

Every year, World Password Day arrives with a familiar chorus: use longer passwords, don’t reuse them, enable multi-factor authentication, and every year, attackers walk straight through the same open doors. The advice hasn’t changed dramatically. The threat, however, has, and the gap between the two is wider than ever. In 2026, the conversation around passwords sits at a genuine inflection point. Passkeys are gaining serious institutional momentum. AI is turbocharging credential attacks at an industrial...

Over the course of two days (April 27-28), banks, fintech companies, technology providers, and regulators from across the UK financial ecosystem came together for a cybersecurity competition designed to test real-world readiness, decision-making under pressure, and the ability to defend critical financial infrastructure against sophisticated attacks. Hosted by Lloyds Banking Group, Hack The Box, and Google Cloud Security, the UK Financial Services Security Hackathon brought together 33 teams from 16 organisations. Each team consisted of...