Threat intelligence, expert analysis and practical security guidance
Insights from CREST-certified practitioners on the threats, regulations and technologies shaping cyber security.
All insights · page 10
109 to 120 of 166 articles
DORA Compliance for Cyber Security: Your Roadmap to 2025 Readiness
DORA compliance requirements explained: who is in scope, the core obligations, how DORA compares with NIS2 and ISO 27001, and the steps to get ready.
Read article · 10 min
Beyond the Perimeter: How Internal Penetration Testing Finds What External Tests Miss
Internal vs external penetration testing: internal tests find what attackers exploit once inside. Learn common gaps, hybrid work risks and how often to test.
Read article · 7 min
Business Continuity vs Disaster Recovery: Key Differences, Strategies and Common Pitfalls
Business continuity vs disaster recovery: the key differences, when you need both, how cyber attacks disrupt each and the common planning mistakes to avoid.
Read article · 6 min
Legal Aid Providers: Are You Ready for December’s Cyber Essentials Deadline?
Cyber Essentials for legal aid providers becomes mandatory in December 2025. Learn the five controls, how certification works and how to meet the deadline.
Read article · 10 min
API Penetration Testing in 2025: The New Battleground for Cyber Offence
API penetration testing in 2025 finds flaws attackers target first. Learn how it differs from web app testing and what an API pen test report should cover.
Read article · 10 min
Achieving ISO 27001:2022 Compliance, Your Complete UK Consultancy Guide
How to achieve ISO 27001:2022 compliance: key requirements, common pitfalls and a readiness timeline, plus when an ISO 27001 consultant can help.
Read article · 9 min
AI-Powered Penetration Testing: Enhancing Traditional Reconnaissance and Enumeration
AI in penetration testing improves reconnaissance and enumeration, from LLM-powered intelligence gathering to passive data collection, with human oversight.
Read article · 8 min
Purple Teaming: Collaboration for Stronger Defences
What is purple teaming? Learn how red and blue teams work together, the metrics that matter and how to build purple team playbooks that improve detection.
Read article · 11 min
PenTestGPT and the Future of AI Red Teaming
What is PenTestGPT? Learn how AI simulates red teaming, how prompt design shapes results and the ethical risks of using AI penetration testing tools today.
Read article · 9 min
Healthcare Penetration Testing: Protecting Patient Data in a Digital NHS
Healthcare penetration testing for the NHS protects patient data and supports DSP Toolkit compliance. Learn the EMR attack risks and remote access testing.
Read article · 11 min
What Is Data Loss Prevention? (2025 Edition)
Data loss prevention (DLP) stops sensitive data leaving your organisation, at rest, in motion or in use. Learn how Microsoft DLP and cloud DLP protect you.
Read article · 16 min
Securing the Digital Rig: How Cyber Attacks on Oil and Gas Are Evolving And What to Do About It
Oil and gas cyber attacks are evolving fast. Learn why the sector is targeted, the key OT threat trends and how to strengthen oil and gas cyber security.
Read article · 13 minNo articles match that search. Try a broader term.
Get expert threat intelligence in your inbox
A monthly briefing on emerging threats, regulatory changes and practical defence advice. No spam, unsubscribe anytime.