Insight

 The uncomfortable truth about MFA is that its implementation can start running into trouble before the technical rollout is even finished.  IT switches it on, and then a senior calls to ask whether they can be excluded. Perhaps they fear that the extra authentication step will slow them down. The request sounds minor. Grant it, though, and the organization now has an MFA policy that does not apply equally to all the people.  NIS2 makes...

Over the past few years, AI has gone from something understood and used by a select few to a cornerstone of almost every organisation. As businesses race to adopt new models, tools and autonomous agents, security and governance are struggling to keep up. Recent incidents involving AI agents behaving in unexpected ways have offered an early glimpse of what could happen as these systems are given greater autonomy. Closer to home, organisations face a more...

An annual penetration test reliably satisfies an audit requirement but tells you comparatively little about your actual exposure for the other eleven months of the year. This piece covers what an annual test does and does not actually evidence, why the compliance framing caps what testing programs aim for, and what changes operationally once an organization moves toward continuous testing instead. What Does an Annual Penetration Test Actually Evidence, and What Does It Not? An...

Business owners everywhere are embracing AI and its capabilities more than ever, and for good reason. They can speed up processes, minimize mistakes, and even save money, but is this all it is doing? Not in the slightest. In fact, this is only touching the tip of the iceberg. AI has vastly improved sectors across industries, especially in tech in recent years, and here is how.  Network Security and Cybersecurity Whether a fully-fledged enterprise with...

If you’re in the market for an AI threat hunting solution, chances are you’re evaluating based on investigation quality. That’s an understandable and reasonable metric to go on - investigation quality is important, and most vendors focus their marketing on it. It’s not, however, the most important metric. Pretty much every vendor has decent investigation quality. If they didn’t, they wouldn’t be competitive, and you wouldn’t be considering them. You need to be looking at...

Cybercrime no longer divides neatly between lone hackers, organised gangs and state-backed operations. These groups exchange tactics and tools, while stolen data gives them an asset that can be sold, used for fraud, held to ransom or weaponised for political damage.  Geoff White is an award-winning investigative journalist whose reporting has taken him inside global hacking networks, cryptocurrency thefts and modern money-laundering operations.   A former Technology Correspondent for Channel 4 News, he has also reported...

Just days after OpenAI disclosed that one of its security research agents had escaped a testing sandbox by exploiting a previously unknown vulnerability, Anthropic revealed that its own AI models had compromised three real organisations during a cybersecurity evaluation after a configuration error inadvertently gave them internet access. The similarities between the two incidents have inevitably fuelled headlines about "rogue AI", prompting questions about whether frontier AI models are becoming too autonomous to control. The...

The 25th July 2026 marks one year since the Online Safety Act's landmark child safety duties came into force, making it a natural moment to assess what's changed, what's worked and what challenges remain. Although the Act itself received Royal Assent in October 2023, its requirements were introduced in phases, with 25th July 2025 being the date many of the most visible obligations on platforms took effect. The child safety duties require platforms likely to...

Today (20 July 2026), Andy Burnham became Prime Minister of the UK, succeeding Sir Keir Starmer. While there is not yet a detailed 'Burnham tech strategy', pre-transition briefings and reports over recent weeks suggest a strong focus on AI, including plans for a dedicated AI Minister, the scrapping of the hotly debated digital ID programme, and the potential reorganisation of the Department for Science, Innovation and Technology (DSIT), with its responsibilities redistributed across other government...

Moona Ederveen-Schneider is a cybersecurity expert (and Most Inspiring Woman in Cyber Award winner 2026) with more than 20 years of experience across financial services, risk and cyber resilience. She has held senior roles at Deutsche Bank, JPMorgan Chase, UBS, Nomura and ABN Amro, and previously served as Executive Director EMEA at FS-ISAC.  As the founder of Resilia Connect and author of the Practical Post-Quantum Transition Framework, Moona works with organisations preparing for the security risks created by quantum...