Blog
What UK firms are asking about cyber security now
Short, dated posts on the attacks, rules and questions in the news, with what to do about them this week. Each one links to the full briefing or guide behind it.
November 2026
AI didn't create your weak spots. It's finding them.
The NCSC's 2026 review says attackers still get in through old flaws and weak sign-in. What that means for UK firms, and the exemptions to remove first.
Cyber EssentialsCyber Essentials is a starting line, not a finish line
More UK firms hold Cyber Essentials than ever, and the April 2026 rules are stricter. Why the certificate still isn't proof you've done cyber security.
Shadow AIYour staff are already using AI. Do you know which tools?
The NCSC says most UK employees have used AI tools their employer never approved. Why a ban won't work, and what UK firms should do about shadow AI instead.
Connected devicesWhat's connected to your network? Lessons from the freezer attacks
Attackers took over supermarket freezers through guessable passwords and remote access. Three questions every UK board should ask about its own kit.
New posts also go out on LinkedIn and in the Atom feed. For the full papers, see Thought leadership.
Start with a conversation
Tell us about your organisation, your regulators and what is worrying you. We will say plainly whether we can help, and how.
Book a conversation