Posts tagged: Cybersecurity

52 posts

AI ads phishing: check before connecting

8 October 2026

Business Systems Integration Cybersecurity+1

AI ads phishing makes account connections a business decision. Verify the supplier, challenge requested access and agree a narrower reporting workflow.

Zammad security: helpdesk risk checks

2 October 2026

Business Systems Cybersecurity Integration+1

Zammad security questions extend to connected business systems. Review DIVD's qualified case guidance, integration access, ownership and support continuity.

Cloud sandbox security: buyer checklist

26 September 2026

Cloud Cybersecurity Vendor Management

Cloudflare's container disclosure raises practical questions about temporary data. Use this cloud sandbox security checklist to assess supplier evidence.

Ubuntu patch management: SME checklist

24 September 2026

Linux Cybersecurity IT Compliance+1

Ubuntu patch management needs clear ownership as Canonical changes its kernel release cadence. Use a worksheet for testing, recovery and deployment evidence.

PQC supplier questions after G7 call

7 September 2026

Cybersecurity IT Governance Cryptography

The G7's post-quantum call makes supplier roadmaps a practical priority. Ask for product scope, dependencies and migration evidence at your next renewal.

Astra cyber safeguards: buying checks

1 September 2026

AI Cybersecurity IT Governance

OpenAI's Astra safety update changes the questions buyers should ask about cyber access, interrupted tasks and evidence before approving deployment.

Windows patching: August rollout plan

12 August 2026

Windows IT Management Cybersecurity

Microsoft's August security release needs an estate-specific rollout. Use this checklist to match devices, validate business work and close exceptions.

Manufacturing cyber risk: test dispatch

10 August 2026

Cybersecurity Business Continuity IT Strategy

Make UK's August survey connects cyber incidents with production and delivery disruption. Start with a practical exercise around one customer order.

Astra cyber risk: set a release gate

8 August 2026

AI Security IT Governance Cybersecurity

OpenAI paused some Astra activities over possible critical cyber capabilities. Here is how IT buyers can turn that signal into better release decisions.

Claude PyPI malware and build security

2 August 2026

AI Security Cybersecurity Supply Chain Security+1

Anthropic reported a malicious PyPI package running on fifteen systems. What the incident establishes, its detection limits and practical build controls.

AI vulnerability discovery: what changed

27 July 2026

AI Security Cybersecurity AI+1

AI vulnerability discovery claims need evidence. Use Redis release notes to understand patch decisions, CVSS limits and supplier checks before a CVE feed catches up.

Shared Claude chats on Google: check yours

26 July 2026

AI Security Cybersecurity Data Protection+1

Shared Claude conversations can expose work information through public links. Understand sharing, indexing, revocation and the checks a UK business should make.

AI sandbox escape: OpenAI and Hugging Face

24 July 2026

AI Security Cybersecurity AI+1

OpenAI's models escaped their sandbox and hacked Hugging Face to cheat on a test. What this AI sandbox escape means for any business now deploying AI agents.

Post-quantum cryptography checklist

10 May 2026

Cybersecurity Post-Quantum Cryptography IT Strategy+2

Use this post-quantum cryptography implementation checklist to inventory encryption, prioritise sensitive data, test compatibility and assess vendor readiness.

Social engineering: the human side

8 April 2026

Cybersecurity IT Leadership Security Culture

Build a security culture that helps staff verify unusual requests, report suspicious activity and practise responses to social engineering attempts.

Compliance automation strategy

22 March 2026

Compliance IT Leadership Cybersecurity+1

How IT leaders can automate compliance monitoring to reduce audit burden, cut costs, and maintain continuous regulatory readiness across UK organisations.

DLP strategy: data loss prevention guide

21 March 2026

Data Loss Prevention Cybersecurity IT Leadership

A practical guide to building a data loss prevention strategy that protects sensitive information without crippling productivity or creating compliance risk.

SIEM strategy for IT leaders and CISOs

19 March 2026

Cybersecurity SIEM IT Strategy+2

A practical SIEM strategy guide for IT leaders and CISOs. Learn how to select, deploy, and optimise SIEM to detect threats faster and cut alert fatigue.

Ransomware response playbook for leaders

15 March 2026

Cybersecurity Incident Response Ransomware+1

A practical ransomware response playbook for IT leaders covering detection and recovery, with clear actions for each phase of an attack on UK systems.

API security best practices for IT leaders

13 March 2026

API Security Cybersecurity IT Leadership

A practical guide to API security for IT leaders covering authentication, authorisation, rate limiting, and the OWASP API Top 10 with UK deployment context.

Cyber insurance guide for IT leaders

11 March 2026

Cybersecurity Risk Management IT Leadership+1

Cyber insurance guide for IT leaders covering governance, control evidence, policy obligations and renewal readiness throughout the policy term.

Network segmentation guide for IT teams

9 March 2026

Cybersecurity Network Architecture Zero Trust+1

A practical network segmentation guide for IT leaders, covering VLANs, microsegmentation, and zero trust alignment, with implementation steps for UK teams.

DevSecOps guide for IT leaders

8 March 2026

DevSecOps Cybersecurity IT Leadership+1

A practical guide to embedding security into your development pipeline. Learn how IT leaders can implement DevSecOps without slowing delivery or morale.

PAM strategy: privileged access guide

7 March 2026

Cybersecurity IT Leadership Zero Trust

A practical guide to privileged access management strategy that protects your most sensitive systems without crippling productivity or creating user friction.

Social engineering helpdesk attacks

28 February 2026

Cybersecurity Social Engineering IT Leadership+1

Reduce social engineering helpdesk attacks with verified recovery routes, clear escalation rules and practical tests for password and MFA reset requests.

AI code is creating a security debt crisis

26 February 2026

Cybersecurity AI Security Debt+2

AI-generated code is creating security vulnerabilities faster than teams can fix them. Here is what IT leaders must do about the growing remediation gap.

Building a cybersecurity culture

25 February 2026

Cybersecurity IT Leadership Security Culture+1

Cybersecurity culture goes beyond annual training. Practical strategies IT leaders use to build security awareness that changes behaviour and reduces risk.

Third party vendor risk management guide

24 February 2026

Cybersecurity Risk Management IT Leadership+2

A practical guide to third party vendor risk management. Learn how IT leaders can assess, monitor, and mitigate supply chain risk across their estate.

AI powered attacks are hitting firewalls

22 February 2026

Cybersecurity AI Firewalls+1

AI powered attacks breached 600 firewalls in five weeks. Here is what IT leaders need to know about defending against AI augmented threat actors in 2026.

Browser extension security risks

22 February 2026

Cybersecurity Browser Security Endpoint Security+1

Review browser extension security with accurate permission checks, managed allowlists and practical tests that protect access to business applications.

AI vulnerability detection in 2026

20 February 2026

Cybersecurity AI Vulnerability Management+1

AI-powered tools are finding critical security flaws that traditional methods missed for years. What IT leaders need to know about this shift in 2026.

Post-quantum cryptography migration plan

15 February 2026

Cybersecurity Cryptography Infrastructure+1

Build a post-quantum cryptography migration strategy covering crypto inventory, risk priorities, vendor readiness and phased adoption.

Agentic AI: enterprise guide 2026

12 February 2026

Agentic AI Enterprise AI AI Governance+3

Agentic AI is moving from pilot to production. What IT directors and CTOs need to know about deploying autonomous AI agents safely in enterprise settings.

AI autonomous ransomware: the evidence

8 February 2026

Cybersecurity AI Threats Ransomware+2

Separate AI-assisted attacks, autonomous tasks and ransomware forecasts, then test the access, detection, containment and recovery controls your business needs.

Notepad++ supply chain attack

3 February 2026

Cybersecurity Supply Chain Security APT+1

State-sponsored hackers hijacked Notepad++ auto-updates for six months, targeting government and telecom organisations. What happened and what to do next.

How to secure AI agents in production

29 January 2026

Cybersecurity AI Security Agentic AI+2

Secure AI agents in production with network isolation, scoped credentials, tool controls, and human approval gates. Practical guidance for UK IT security teams.

ClawdBot security risks explained

28 January 2026

Cybersecurity AI Security Agentic AI+2

ClawdBot went viral overnight and hundreds of instances were exposed online. Here is what IT leaders need to know about personal AI agent security risks.

AI agents: your new insider threat

27 January 2026

Cybersecurity AI Security Insider Threat+2

40% of enterprise apps will integrate AI agents by year-end. Security leaders must treat autonomous agents as insider threats. Review permissions, ownership and controls.

Slopsquatting: AI supply chain attacks

26 January 2026

Cybersecurity AI Supply Chain Security+1

Slopsquatting exploits invented package names in AI-generated code. Learn the checks CISOs can use before accepting AI-suggested dependencies.

Non-human identity: your blind spot

25 January 2026

Cybersecurity Identity IAM+2

Service accounts, API keys, and AI agents now outnumber humans 100 to 1. The OWASP NHI Top 10 exposes risks most organisations are ignoring right now.

Zero trust security: a practical strategy

17 January 2026

Cybersecurity Zero Trust Network Architecture+1

Plan zero trust architecture with identity checks, device controls and least privilege. Use practical assessment examples and a phased implementation roadmap.

Identity-first security for UK IT leaders

13 January 2026

Cybersecurity Identity Zero Trust+1

Identity-first security architecture shifts access control from networks to identities. Build IAM, MFA, and PAM into a zero trust programme for UK IT leaders.

The CISO's resilience roadmap for 2026

2 January 2026

Cybersecurity CISO Cyber Resilience+1

Part 7 of 7: A practical framework for 2026. Prioritise your actions, measure progress, and build genuine organisational resilience step by step as a CISO.

Communicating crisis to the board

1 January 2026

Cybersecurity CISO Board Communication+1

Part 6 of 7: How you communicate during a crisis defines your leadership. Learn how to turn security incidents into moments that build board confidence.

Incident response and cyber resilience

31 December 2025

Cybersecurity CISO Incident Response+1

Part 5 of 7: When things go wrong, theory meets reality. Learn what works in incident response and how to build capabilities that perform under pressure.

Third-party and supply chain resilience

30 December 2025

Cybersecurity CISO Supply Chain Security+1

Part 4 of 7: Your weakest link is someone else's security posture. Learn to build resilience across your entire supplier and partner ecosystem effectively.

Zero trust as a resilience foundation

29 December 2025

Cybersecurity CISO Zero Trust+1

Part 3 of 7: Zero trust is more than a buzzword. Learn how to implement zero trust architecture that genuinely improves your organisational resilience.

2026 threat landscape for CISOs

28 December 2025

Cybersecurity CISO Threat Intelligence+1

Part 2 of 7: AI-powered attacks, ransomware evolution, and nation-state threats are reshaping cybersecurity. What CISOs must anticipate and plan for in 2026.

Cyber resilience: why prevention fails

27 December 2025

Cybersecurity CISO Cyber Resilience+1

Part 1 of 7: The prevention-first security model is broken. Discover why CISOs must embrace a cyber resilience approach to protect their organisations in 2026.

The modern CISO as business partner

26 December 2025

Cybersecurity CISO IT Leadership+1

Explore how the CISO role is evolving from technical guardian to strategic business partner, with essential skills and frameworks for success in 2026.

5 IT incidents of 2025: lessons

24 December 2025

Cybersecurity Incident Response IT Management+1

From supply chain attacks to cloud outages, key lessons from the biggest IT incidents of 2025 and how to prepare your organisation for what comes next.

2026 IT trends: preparing your business

17 December 2025

IT Strategy AI Digital Transformation+1

From agentic AI to preemptive cybersecurity, discover the key IT trends for 2026 and practical steps to position your organisation ahead of the curve.

Posts tagged: Cybersecurity

Articles