Features

Graham Cluley has spent more than three decades watching cybercrime grow from niche computer mischief into a boardroom threat.  The award-winning cyber security expert, speaker, blogger and podcaster began his career in the early 1990s, writing the first Windows version of Dr Solomon’s Anti-Virus Toolkit before holding senior roles at Sophos and McAfee. Today, he is one of the few voices in cyber security who can explain hacking, scams and AI risk without burying audiences...

Compliance has long been characterised by what many security leaders now recognise as “audit chaos” –  a constant cycle of manual evidence collection, fragmented workflows and point-in-time reporting that struggles to match the pace of AI risk. In response, a new model is growing: agentic compliance. By embedding AI agents directly into trust and security workflows, organisations are beginning to move from reactive, audit-led processes to continuous, real-time assurance. These systems can coordinate tasks, collect...

The demand for cybersecurity protection continues to grow and with hundreds of different providers offering different levels of protection, how do cybersecurity firms gain a competitive advantage in this environment? Understanding what key strategies work when advertising your cybersecurity company online is crucial for success in such a competitive industry; whether you should utilise the services of a specialist advertising agency or whether you can go about advertising your company with whatever in-house capabilities you...

Evolution of AI Phishing As with most cyber threats, AI has created a fundamental shift in the phishing threat landscape. It has become a precision operation powered by AI systems that research, build, deliver, and adapt campaigns autonomously. AI acts as a force multiplier: it scales targeted techniques that previously required experience and time, while simultaneously lowering the barrier to entry once again. To understand the scope of this shift, consider that AI can now...

This week the European Central Bank (ECB), which supervises about 111 of the eurozone's largest banks, convened at an urgent meeting with major lenders to accelerate efforts around AI security and heed caution on the cyber risks of AI. Officials have warned banks specifically about the risks linked to Anthropic’s Claude Mythos Preview and similar systems, amid growing concern that AI can now identify and exploit software flaws faster than institutions can patch them. Sam...

The Cyber Agony Aunts - Rebecca Taylor, Threat Intelligence Knowledge Manager and Researcher at Sophos, and Amelia Hewitt, Founder of CybAid and Co-Founder and Director of Cyber Consulting at Principle Defence - are back! After a whirlwind of a year, with the release of their first co-authored book 'Securely Yours' in early 2025 and the launch of their joint podcast, The Cyber Agony Aunt Podcast, Rebecca and Amelia are back with book two: Resilient You: An Agony...

Last week, Rebecca Taylor, Threat Intelligence Knowledge Manager and Researcher at Sophos, and Amelia Hewitt, Director of Cyber Consulting at Principle Defence and Founder of CybAid, released their second co-authored book Resilient You: An Agony Aunts’ Guide To Keeping It Together. The book is a follow up to their 2025 book Securely Yours. The book is a practical Agony Aunt-style guide for individuals wanting to build resiliency into their careers. The independently published book was...

Most people understand what it means to protect a human identity because the dangers of someone impersonating you online or stealing and cloning your card are immediately obvious. Today, organisations rely on thousands of non-human identities that belong to software applications, cloud workloads, APIs, bots, and now AI agents as well, which can affect almost everyone if compromised. So, what happens when a cyber attacker hijacks the identity of an autonomous agent. Meet the invisible...

Cyber is no longer a supporting capability. It now shapes how defence organisations plan, assess and act. Across NATO and allied forces, cyber intelligence is increasingly embedded into operational planning, from situational awareness through to targeting and strategic decision-making. At the same time, the threat landscape is becoming more complex. State-aligned actors are more active, campaigns are more coordinated, and the line between cyber and conventional operations continues to blur. Cyber operations in Ukraine have...

I want to talk about a bug. Not because the bug itself was exceptional, but because what it exposed should change how every organisation architects AI governance. For several weeks earlier this year, Microsoft 365 Copilot read and summarised confidential emails despite sensitivity labels and Data Loss Prevention policies being correctly configured to block that behaviour. The bug, tracked as CW1226324, affected emails in users’ Sent Items and Drafts folders. Sensitive legal communications, business contracts...