Insights

Modern cyber attacks are rarely isolated incidents. More often, they form part of sustained campaigns conducted by persistent threat actors. Once attackers successfully compromise an environment, they frequently return, either because they still have access or because the weaknesses that enabled the breach remain exploitable. Like any criminals, they tend to favour the path of least resistance. If an organisation’s defences appear weak or poorly monitored, it becomes a more attractive target than one with stronger security controls and visible detection capabilities.

Studies show that around 80% of SMEs have experienced a cyber incident, yet many still lack dedicated security expertise or in-house capability. At the same time, regulators, insurers and customers are placing increasing pressure on small and medium-sized businesses to demonstrate basic security controls and preparedness.

Phishing remains one of the most pervasive and effective threats in the cybersecurity landscape. Despite the proliferation of advanced malware, ransomware and cloud-native exploits, phishing continues to outpace many other attack types because it targets human behaviour rather than technical vulnerabilities.

From April 2026, the Cyber Essentials (CE) and Cyber Essentials Plus (CE+) schemes will be strengthened to reflect the realities of today’s threat landscape. These updates are not cosmetic. They introduce tougher assessment standards, clearer scoping rules and more explicit technical expectations, particularly around identity security, patching and resilience against ransomware.

Today’s threat actors rarely try to break in anymore. Instead they find ways to simply log in. Identity has become the primary attack surface, and artificial intelligence is accelerating this shift faster than most organisations can respond.

Adversary-in-the-middle attacks surged 146% in the past year according to Microsoft's Digital Defense Report. What is AiTM and why is it on the rise?

When a cyber incident hits, the first question organisations often ask is “who’s responsible?”. However, the more important question is “who is accountable?”.

As cyber threats continue to grow in volume, speed and sophistication, organisations face a big challenge. How do you achieve round-the-clock security coverage that is globally consistent, yet locally relevant to your business, your region and your regulatory environment?

In 2026, the landscape of ransomware attacks will continue to evolve, drawing from past trends while adapting to new defences and technologies. This blog will look into how ransomware is changing in 2026.

Business Email Compromise remains one of the most effective and damaging cybercrime techniques in use today. Unlike ransomware or malware-driven attacks, BEC does not rely on exploits or malicious payloads. It relies on people, trust, and routine business processes. That is precisely why it continues to succeed, even in organisations with mature technical security controls.

The rapid rise of artificial intelligence across business feels new, urgent and at times overwhelming. Yet for many technology and security leaders, there is a strong sense of déjà vu. The conversations happening today about AI adoption closely mirror those that surrounded early cloud adoption more than a decade ago. The same mixture of excitement, scepticism, regulatory anxiety and skills shortages is resurfacing, just with different technology at the centre. 

Data privacy remains one of the most critical business issues in 2026, but the conversation has matured. Data is still one of the most valuable assets most organisations possess, yet it is now more distributed, more interconnected and more exposed than ever before. Cloud platforms, AI systems, third-party integrations and machine identities mean data is constantly being accessed, processed and moved in ways that are not always fully understood.