Threat intelligence, expert analysis and practical security guidance
Insights from CREST-certified practitioners on the threats, regulations and technologies shaping cyber security.
All insights
1 to 12 of 166 articles
What Is ISO 42001? The AI Management Standard Explained
ISO/IEC 42001 is the international standard for managing AI responsibly. Learn what it requires, who needs it and how it fits with ISO 27001.
Read article · 11 min
PHP2Shell Attack Roots 25 Firewalls: Inside the AI-Assisted Campaign and How to Defend Against It
How attackers chained PHP2Shell and the Fragnesia kernel flaw to root 25 firewalls and reach a government network, and the steps to protect your estate now.
Read article · 12 min
Cyber Essentials vs Cyber Essentials Plus: Which Does Your Business Need?
Cyber Essentials or Cyber Essentials Plus? Compare self-assessment and audited certification, costs, timescales and which one your contracts actually require.
Read article · 11 min
Norway Raises Its National Cyber Risk Level to HIGH: What It Means and What to Do Now
Norway's NSM has raised the national cyber risk level to HIGH. What it means, who is most exposed and how to act on NSM's 21 baseline security measures.
Read article · 12 min
From Patchwork to Platform: Why SASE Beats a Stack of Point Solutions
SASE vs point solutions: swapping a patchwork of security boxes for one platform gives you one policy and one console. Learn what SASE is and how to migrate.
Read article · 8 min
Two Critical PHP Flaws: What Every Website Owner Needs to Know
Two critical PHP vulnerabilities let attackers take over web servers without a password. Learn which patched versions to install and what to ask your host.
Read article · 10 min
Zero Trust Security: Why It Is Time to Retire the VPN and Rethink Access
Zero trust vs VPN: VPNs grant broad network access, while zero trust network access verifies every request. Learn the benefits and how to start your move.
Read article · 12 min
Beyond the Questionnaire: Evidence-Based Vendor Security Assessment for Security Leaders
How to assess vendor security with evidence: tier suppliers by impact, validate controls and move to continuous third-party risk management.
Read article · 10 min
Approved, Warned or Blocked: A 90-Day Plan to Bring Shadow AI Under Control
How to manage shadow AI without blanket bans: a 90-day plan to find AI tools, sort them into approved, warned or blocked lanes and build lasting governance.
Read article · 11 min
Can You Actually Restore? A Cyber Recovery Testing Playbook for Security Leaders
How to test cyber recovery properly: set impact thresholds, rehearse realistic ransomware recovery scenarios, cover cloud and SaaS, and prove backups restore.
Read article · 10 min
STIX and TAXII Explained: Sharing Threat Intel at Speed
STIX and TAXII are open standards for sharing threat intelligence at machine speed. Learn how they work together and how your SOC can start using them.
Read article · 9 min
How to Build a Cyber Threat Intelligence Program Your SOC Will Actually Use
How to build a cyber threat intelligence program your SOC will use: start with intelligence requirements, not feeds, and follow a phased CTI maturity roadmap.
Read article · 8 minNo articles match that search. Try a broader term.
Get expert threat intelligence in your inbox
A monthly briefing on emerging threats, regulatory changes and practical defence advice. No spam, unsubscribe anytime.