Insight

If you’re in the market for an AI threat hunting solution, chances are you’re evaluating based on investigation quality. That’s an understandable and reasonable metric to go on - investigation quality is important, and most vendors focus their marketing on it. It’s not, however, the most important metric. Pretty much every vendor has decent investigation quality. If they didn’t, they wouldn’t be competitive, and you wouldn’t be considering them. You need to be looking at...

Cybercrime no longer divides neatly between lone hackers, organised gangs and state-backed operations. These groups exchange tactics and tools, while stolen data gives them an asset that can be sold, used for fraud, held to ransom or weaponised for political damage.  Geoff White is an award-winning investigative journalist whose reporting has taken him inside global hacking networks, cryptocurrency thefts and modern money-laundering operations.   A former Technology Correspondent for Channel 4 News, he has also reported...

Just days after OpenAI disclosed that one of its security research agents had escaped a testing sandbox by exploiting a previously unknown vulnerability, Anthropic revealed that its own AI models had compromised three real organisations during a cybersecurity evaluation after a configuration error inadvertently gave them internet access. The similarities between the two incidents have inevitably fuelled headlines about "rogue AI", prompting questions about whether frontier AI models are becoming too autonomous to control. The...

The 25th July 2026 marks one year since the Online Safety Act's landmark child safety duties came into force, making it a natural moment to assess what's changed, what's worked and what challenges remain. Although the Act itself received Royal Assent in October 2023, its requirements were introduced in phases, with 25th July 2025 being the date many of the most visible obligations on platforms took effect. The child safety duties require platforms likely to...

Today (20 July 2026), Andy Burnham became Prime Minister of the UK, succeeding Sir Keir Starmer. While there is not yet a detailed 'Burnham tech strategy', pre-transition briefings and reports over recent weeks suggest a strong focus on AI, including plans for a dedicated AI Minister, the scrapping of the hotly debated digital ID programme, and the potential reorganisation of the Department for Science, Innovation and Technology (DSIT), with its responsibilities redistributed across other government...

Moona Ederveen-Schneider is a cybersecurity expert (and Most Inspiring Woman in Cyber Award winner 2026) with more than 20 years of experience across financial services, risk and cyber resilience. She has held senior roles at Deutsche Bank, JPMorgan Chase, UBS, Nomura and ABN Amro, and previously served as Executive Director EMEA at FS-ISAC.  As the founder of Resilia Connect and author of the Practical Post-Quantum Transition Framework, Moona works with organisations preparing for the security risks created by quantum...

Last year, CSIDES took place on The Grand Pier in Weston-super-Mare for the first time - a day filled with cyber talks, Cyber's Got Talent, exceptional swag, its own theme song and - we are told - an extraordinary raffle.  After the success of the inaugural event last summer, on the 9th October 2026, industry experts will gather in North Somerset once again, courtesy of event sponsors Tines, 4FOX Security, Consultants Like Us, Punk Security,...

Penetration testing has been a cornerstone of cybersecurity for decades. For many organisations, it is part of an annual security programme, providing reassurance for boards, evidence for customers and insurers and a demonstration of compliance with regulatory requirements. It is also one of the most commonly purchased cybersecurity services.  Despite its widespread use, penetration testing is actually one of the least consistently defined services in the industry. Two providers can assess the same environment and produce very different reports. One may identify critical vulnerabilities that...

More than 100 vendors now position themselves as AI SOC platforms, but the category didn’t even exist 18 months ago.   The Cloud Security Alliance found that AI-enhanced SOCs investigated cloud security incidents 45–61% faster than manual teams, explaining the boom in interest.   The vendors truly defining the AI SOC space are the ones with fully agentic underpinnings. This piece profiles those vendors, offers a shared framework for comparing platforms, and explains what makes...

The last time I spoke with Securonix, it was to discuss its acquisition of ThreatQuotient, adding a threat intelligence capability to its existing portfolio of security analytics, threat detection and incident response through its cloud-native Unified Defense SIEM. Several months on from that announcement, new steps have been taken to enable a wider user base, alongside the launch of new capabilities designed to support AI measurement and management. The combination of unified SIEM and managed...