Cybersecurity Blogs | Opinions

Blogs & Opinions 10.12.2024

NIS2: Greater Resilience or More Red Tape?

NIS2 came into effect on 17 October but has so far proven something of a damp squib

Blogs & Opinions 05.12.2024

CISO ‘How to’ Without the Bull: Phishing Simulations

Are phishing simulations right or wrong?

Blogs & Opinions 28.11.2024

The Shifting Sands of Ransomware in 2024: Who’s Who and What’s New?

Among the shifting ransomware ecosystem landscape, two new groups are worth noting.

Blogs & Opinions 14.11.2024

Weighing Up Potential Loss and Prevention in the Wake of Crowdstrike and NetworkRail Outages

Conor O’Neill highlights the true cost of a data breach to your company and how businesses can minimise future risks.

Blogs & Opinions 07.11.2024

CISO ‘How to’ Without the Bull: Third-Party Risk Management

These blogs will focus on making a tangible difference in a language the business understands. The points are drawn from experience delivering cybersecurity transformation programmes in multiple industries.

Blogs & Opinions 24.10.2024

Rethinking Mac Safety: Strategies for Enhanced Workplace Protection

There are now 300 identified malware families for macOS.

Blogs & Opinions 17.10.2024

Ensuring NIS2 Compliance With Proactive Cyber Resilience

NIS2 is here. Are you ready?

Blogs & Opinions 17.09.2024

I Challenged Myself to Build a Ransomware Toolkit Using Only ChatGPT: Here’s What Happened

The capabilities of GenAI are aiding and speeding up the creation of effective ransomware toolkits

Blogs & Opinions 11.09.2024

Cybersecurity Must Rebrand From an Old Boys’ Club – Here’s How

The cyber industry must shake off its boys’ club reputation and ensure diversity at every level – from entry to boardroom.

Blogs & Opinions 03.09.2024

Cyber Resilience: Identity is at the Heart of Response and Recovery

It’s happened. Your organisation is now one of the 70% hit by a cyber attack. What now?

Blogs & Opinions 27.08.2024

The Role of the Human Factor in the Cybersecurity and Resilience Bill

The CSR Bill’s current focus on regulatory compliance and incident reporting is vital, but it should strongly emphasise the human factor in cybersecurity.

Blogs & Opinions 08.08.2024

The Six Biggest Cyber Threats of 2024

Reflecting on 2024 so far, the cyber danger zones can be divided into key areas.

Blogs & Opinions 30.07.2024

Cyber Resilience in Healthcare: Tackling Ransomware with Advanced Cyber Defences

When it comes to protecting healthcare data and systems, the threat is high, and the stakes are even higher, warns Dr. Darren Williams In early June 2024, major London hospitals, including Kings College Hospital and Guy’s and St Thomas’s, declared a critical incident following a ransomware attack on Synnovis, a pathology services provider. This cyber […]

Blogs & Opinions 25.07.2024

The Labour Party Promised Change: What Does That Mean for Cyber?

The Labour government promised “change” as its big election manifesto theme. Will that stretch to cyber?

Blogs & Opinions 18.07.2024

How CISOs Can Navigate Legal Risk and Accountability

CISOs are often stretched thin, often without the same protections as other executive team members.

Blogs & Opinions 13.06.2024

Plugging the Cybersecurity Skills Gap With Contractors

Cybersecurity leaders face immense pressure to strengthen their organisations’ defences. Yet the industry is struggling to fill positions. Luckily, CAPSLOCK’s Dr Andrea Cullen has a plan The UK’s cybersecurity sector is still struggling to fill positions. The government estimates that 51% of UK companies lack basic cyber skills. This shortage of cybersecurity professionals is putting […]

Blogs & Opinions 16.05.2024

Solving the Cyber Skills Shortage In-House

Peter Danhieux shares three best practices to consider when developing an internal upskilling programme.

Blogs & Opinions 02.05.2024

Security Culture: Out With Ephemeral, In With a Lasting Psychological Approach

What exactly is a security culture and how can organisations build and maintain one?

Blogs & Opinions 11.04.2024

Government Can’t Manage the Deepfake Threat – Execs Need to Shoulder the Responsibility Instead

Any faith in the ability of governments to deal with deepfakes is misplaced

Blogs & Opinions 04.04.2024

You’ve Got an Incident Response Plan, but Have You Tested It?

By failing to prepare, you’re preparing to fail, so get that incident response plan in place, says Chris Denbigh-White If two buildings are ablaze, then it stands to reason that the one with fire marshalls, evacuation plans, sprinkler systems and the one that has taken steps to improve its ability to contain a fire with […]

Blogs & Opinions 19.03.2024

Getting Into the Psyche of a Ransomware Hacker in 2024

What’s changed in the ransomware landscape in 2024? Chris Rogers considers the psyche of those writing the code and looks at new tactics, tools and the prevalence of double-extortion ransomware The cybersecurity ecosystem moves at an extremely rapid pace. However, in the months ahead, it seems inevitable that organisations will be faced with even more […]

Blogs & Opinions 29.02.2024

Class Action Lawsuits and Ransomware: A Wake-up Call for UK Businesses

Large-scale data breach class action lawsuits aren’t new, the number of collective actions being filed in the UK is on the rise

Blogs & Opinions 22.02.2024

Ransomware: The Myth of Sophistication

Sometimes it’s the simple things that can have the biggest impact on cybersecurity posture

Blogs & Opinions 15.02.2024

Key Cyber Policy Updates All Board Members Should Act on in 2024

Board-level responsibility for cybersecurity can be far more extensive than many assume.

Blogs & Opinions 30.01.2024

Pen Testing v Ethical Hacking: Which is Better?

Which is more effective in improving a company’s cybersecurity posture?

Blogs & Opinions 11.01.2024

Three Things CISOs Can Do to Drive Accountability

There are three ways that CISOs can use security data lakes to drive accountability.

Blogs & Opinions 04.01.2024

Advanced Threat Intelligence: Transforming Cybersecurity Effectiveness

Evolving cyber threats requires evolving threat intelligence. Here’s how to do it.

Blogs & Opinions 28.12.2023

Why Convergence is Gold For Networking and Security

Dave Greenfield believes in the power of converged networking and security teams, and he’s put pen to paper to explain why The convergence of networking with security forms a pivotal foundation in protecting IT infrastructures against the ever-evolving landscape of cyber threats. This union not only safeguards sensitive data and critical resources, but also bolsters […]

Blogs & Opinions 26.12.2023

Shadow AI and the AI Apps That Are a CISO’s Nightmare

Forty per cent of enterprise apps involve uploading content, code, files, or spreadsheets for AI assistance. This raises huge data leakage questions.

Blogs & Opinions 12.12.2023

What the UK Can Learn From German Employee Cybersecurity Training

Sometimes the apples really are greener…

Blogs & Opinions 05.12.2023

ChatGPT Turns One: A Story of Trust, Sensitive Data and Skills

One year older, but is it one year wiser?

Blogs & Opinions 28.11.2023

What Does the ‘Brain Drain’ Mean for Cybersecurity?

The bulk of skills shortages in cybersecurity are for experienced personnel. But why?

Blogs & Opinions 03.11.2023

Insider Threats: A Proactive Protection Strategy

Keep your friends close, and your insiders closer…

Blogs & Opinions 24.10.2023

Why Cybersecurity Needs to be Part of ESG

The C-suite needs to be able to view the cyber risk profile of the business to determine how well it meets its ESG objectives.

Blogs & Opinions 12.10.2023

Are Data Protection Standards Slipping in the Cloud Era?

The cloud undoubtedly comes with many positives, but it has also led to businesses storing far more data than they need to

Blogs & Opinions 03.10.2023

Chinese Espionage is Back on Track: What Businesses Need to Know

The stakes just got higher in the world of cyber espionage.

Blogs & Opinions 29.09.2023

The Lowdown on Our Grab the Mic: Women in Cyber Event

Over 200 people (and one pigeon) attended our inaugural event. Here’s what happened.

Blogs & Opinions 19.09.2023

Crime-as-a-Service: Anyone Can Be a Cyber Criminal

No Technical skills or expertise? No problem. You can still become a cyber criminal…

Blogs & Opinions 05.09.2023

Cyber Batman: The Dark Fight of Cyber Vigilantism

Where does the moral boundary for cyber vigilantism lie?

Blogs & Opinions 29.08.2023

Four Ways AI is Being Used to Supercharge Cyber Crime (and How to Use it in Defence)

The AI technology used to execute next-gen social engineering attacks can also be deployed to defend against them. Here’s how to be on the right side of it…

Blogs & Opinions 08.08.2023

Is your Board Paying Cybersecurity Lip Service?

Cyber risk is increasingly prevalent as a Boardroom topic, but just talking about it isn’t enough…

Blogs & Opinions 01.08.2023

What Risk Officers Need to Know about How Generative AI is Transforming Financial Services

Generative AI is transforming financial services, and Olivier Bessi is considering the opportunities and the risks that this evolution entails

Blogs & Opinions 27.07.2023

Government Departments Haemorrhaging Data and Devices Aren’t Being Held Responsible

Government departments are exploiting loopholes to avoid cybersecurity failure disclosures, and increasingly relaxed regulation means they’re getting away with it, bemoans Jon Fielding After five years of GDPR and three years of hybrid working, you’d expect organisations to have improved their data handling and device security. But in the public sector, losses are still […]

Blogs & Opinions 21.07.2023

A Cyber Dummy’s Guide to the Galaxy

They say good things come in threes. This is my third content and marketing gig working in tech, but this time it’s different. It’s cyber. Only cyber. Or to be more specific, cybersecurity. There’s no data engineering, JavaScript, manual testing, SQL or business analysis to fall back on. Just scary, unknown, cybersecurity Everywhere I’ve worked […]

Blogs & Opinions 18.07.2023

Leaked Nudes Threat: The Horrifying New Low of a Data Breach

Data breaches have taken a terrifying turn as cyber criminals stoop to new lows, threatening to expose personal and intimate photos of female data breach victims. Nikki Webb investigates the painful consequences that breach victims face Louise, a resident of South Wales, found herself caught in a web of deceit and fear after her private […]

Blogs & Opinions 08.06.2023

Four Considerations for CISOs Making Security Investment Decisions

Ellen Sundra considers benchmarking, connectivity, scaling and automation.

Blogs & Opinions 18.05.2023

Easy as 1, 2, 3: How the Education Sector Can Combat Cyber Threats

While cybersecurity is a top concern for education institutions, many face resource limitations when it comes to constructing proper cyber defence strategies due to a lack of budget, staff, and technology.

Blogs & Opinions 12.05.2023

Four Things CEOs Need to Know About DORA

DORA aims to ensure that the financial services industry can withstand and respond to digital risks. Here’s the low-down on the regulation

Blogs & Opinions 19.04.2023

ChatGPT for the Legal Industry: Friend or Foe?

The legal sector has much to gain from using ChatGPT but also much to lose. Lawrence Perret-Hall weighs up the advantages and disadvantages

Blogs & Opinions 14.04.2023

XX Hacking: Three Tips for Women Aspiring to be a Professional Hacker

Beth Robinson highlights the additional considerations that those with a double X chromosome may need to take if aspiring to be a professional hacker

Blogs & Opinions 31.03.2023

Microsoft Active Directory: What Is It and Why Is It a Gateway to So Many Successful Cyber Attacks?

Ninety percent of cyber attacks exploit Microsoft Active Directory. This statistic alone should be enough to make CEOs wake up to its challenges, argues Guido Grillenmeier