Hello world!
Welcome to WordPress. This is your first post. Edit or delete it, then start writing!
Insights
Articles
Insights, news and cyber defence guidance for organisations.
Deepfake executive voice and video: the fastest-growing payment fraud of 2026
Criminals use AI to clone executives' voices and faces and order transfers over video calls. Organisations need to change approval processes, not just train staff to spot fakes.
Ransomware in 2026: extortion without encryption
Ransomware groups increasingly steal data and threaten to leak it or report the victim to regulators, without encrypting anything. Hospitals and mid-sized businesses remain prime targets.
Firewalls and VPNs have become the attackers' front door
Vulnerabilities in edge devices such as firewalls, VPN gateways and load balancers are exploited within days of disclosure. Patch faster and monitor the devices themselves.
Session token theft bypasses MFA: cloud accounts taken over without a password
Infostealer malware and adversary-in-the-middle phishing steal post-login cookies, so traditional MFA is no longer enough.
Prompt injection: when your AI agents are tricked into working for attackers
Companies are wiring AI agents into email, documents and internal systems. Hidden instructions in a web page or file can make an agent leak data.
Supply chain attacks through open-source packages and CI/CD
Typosquatted packages and hijacked maintainer accounts are used to plant malicious code in software organisations use every day.
Fake base-station SMS and QR phishing spread across Thailand
Scammers use SMS blasters posing as cell towers, and QR codes in emails or posters, to steal banking details and install remote-control apps.
Harvest now, decrypt later: time to prepare for post-quantum cryptography
Data intercepted today could be decrypted by future quantum computers. Organisations that keep data secret for years should start inventorying their cryptography.