News

Annual audits used to define ISO 27001 compliance. A company would scramble for weeks, pull together evidence binders, pass the audit, and forget about the ISMS until the next surveillance visit. That cycle is collapsing. The ICO's enforcement appetite is growing. As UK procurement contracts increasingly mandate current certification, the October 2025 deadline for transitioning from the 2013 standard to ISO 27001:2022 has already passed. That means many organisations still running outdated controls face uncomfortable...

A growing tension sits at the heart of enterprise AI deployments: organisations want agents to act autonomously, yet handing over passwords and API keys to automated systems represents a significant and largely unresolved security risk. Proton is now attempting to close that gap with the launch of Proton Pass for AI Agents, a capability that wraps credential sharing in a structured token framework built around the principle of least-privilege access. Announced today, the feature introduces...

A critical security vulnerability in NGINX, the web server software underpinning more than 30% of all websites globally, has been confirmed as actively exploited in the wild, less than a week after its public disclosure. The flaw, tracked as CVE-2026-42945 and dubbed 'NGINX Rift', carries a severity score of 9.8 out of 10. It affects virtually every standard NGINX build released between 2008 and May 2026, an exposure window spanning 18 years. NGINX's developer, F5,...

Certes has released new research showing that many organizations remain unprepared for the security risks posed by quantum computing, despite growing awareness of the threat. According to the company’s Emerging PQC Imperative report, 78% of organizations believe legacy systems represent their biggest quantum security risk. The findings highlight growing concerns that outdated infrastructure and applications could leave sensitive data exposed as quantum computing capabilities advance. The study, conducted by Freeform Dynamics and commissioned by Certes,...

Check Point has launched an agentic orchestration platform that can end the policy drift, stalled Zero Trust projects, and manual configuration backlogs that have plagued enterprise security teams for decades. The company's Agentic Network Security Orchestration Platform is built around autonomous AI agents that translate business intent directly into firewall policy, tighten configurations in real time, and respond to threats across multi-vendor environments without waiting for a human to raise a ticket. It's an ambitious...

Cybersecurity firm Huntress has joined forces with global fintech and insurance giant Acrisure to launch a new cyber insurance programme targeting small and mid-sized businesses, with no deductible for eligible applicants. The programme, announced today, gives qualifying Huntress customers and partners access to either Cyber or Tech Errors and Omissions (Tech E&O) insurance policies placed through Acrisure, using a streamlined application process designed to cut through the complexity that often makes obtaining cyber insurance a...

WorkNest Secure has launched a new cybersecurity and compliance division aimed at helping organizations strengthen security, manage risk, and meet growing regulatory demands. The new division, called WorkNest Secure, brings together the cyber, information security, and data protection capabilities of Pentest People and Bulletproof under one brand. Both companies became part of WorkNestGroup following a series of acquisitions and integrations completed over the past year. The launch marks a significant expansion of WorkNestGroup’s cybersecurity offering...

Cost talk around servers tends to rot into slogans. “Cloud is cheaper.” “Dedicated is safer.” “Shared is fine.” None of that pays a bill. A business saves money on a VPS only when someone counts the boring parts: the monthly plan, storage add-ons, bandwidth overages, time spent on updates, outages that eat revenue and developer hours lost. "Is the cloud slow today?” Annual savings live in those details. One clean comparison across twelve months can...

In January 2026, Martin Kuchar, one of the organisers of BTC Prague, received a message on Telegram. A familiar contact, a compromised account, a familiar context, an invitation to jump on a call. The link led to a page visually identical to Zoom. What followed was the standard script: audio issues, a prompt to install an update. That was all it took. This is not phishing in the classical sense. There is no suspicious email...

Modern trading apps have opened up global financial markets to UK investors like never before. Today, these platforms process billions of data points daily, making the security of live data a massive technical challenge. The High Stakes of Real-Time Trading Data When traders interact with a chart, they rely on the accuracy of the price quote to make split-second decisions. If a data feed suffers from high latency or is manipulated, it creates a discrepancy...