Intelligence Briefings

Insight you
can act on.

We publish our own research on cyber solutions, compliance and talent. Analysis from the ground level, written for the people who carry the commercial risk, not the console.

No articles in this category yet.

All published insights

The Notification Was Authentic. The Sender Was Not. October 2026
Twelve Certificates Were Valid. Nobody Had Requested Them. October 2026
Dell Named 1.18.0 As The Fix. One Of The Flaws Is Filed Against 1.18.0. October 2026
Buy The Certificate Your Pipeline Is Asking For. October 2026
The Workaround Switches Off The Encryption. The Deadline Is Sunday. October 2026
The Renewal Is The Audit You Did Not Schedule. September 2026
Auditing Appears in 19% of UK Core Cyber Adverts. Auditor Appears in 3% of Titles.
Unauthorised Access Was 39.5%. Its Entry Point Was Identified In 5.2% Of Cases. September 2026
The Supplier Was Fined. Its Customers Are Still Under Investigation. September 2026
The Board Sets the Notice Period September 2026
Nobody Attacked Google. September 2026
The First Security Hire Should Be The Third Decision. September 2026
The Advert Demands a Degree. The Hiring Manager Does Not. · September 2026
The Deal Was Agreed. Then The Questionnaire Arrived. September 2026
The Deadline Was August. The Ransomware Came In September. September 2026
No Significant Impact On Other Businesses September 2026
Nine Regulators, Eighteen Empty Chairs September 2026
It Only Had To Arrive. September 2026
OpenAI Asked Parliament to Regulate OpenAI September 2026
The Email Authenticated. The Requester Did Not. September 2026
The Deadline Moved. The Duty Did Not. September 2026
The Contract Rate Rose 17%. The Salary Fell 7%. Only One of Those Is a Pay Rise. September 2026
The Fix Was Public. The Patch Was Not. September 2026
Aware Is Now A Legal Term September 2026
Average Pay Rose 1.1%. The Architects Did Not Get The Average. September 2026
The Login Worked As Designed September 2026
The Key Was In The Page Source September 2026
The Precondition Was A Signup Form August 2026
The Patch Nobody Scheduled August 2026
One Person Deep August 2026
Notified And Ignored August 2026
Too Small To Notify August 2026
The Model Knew Which Database Mattered August 2026
Protected By Scarcity August 2026
Fully Staffed, Still Exposed August 2026
Eighty Servers Was Enough August 2026
Isolated By Assumption August 2026
No encryption. No ransomware. No way out. August 2026
The Shortage Is Over. The Standard Went Up. August 2026
Verified, Signed and Malicious August 2026
The Incomplete Patch August 2026
Fewer Roles, Same Risk August 2026
The Breach You Cannot Assess July 2026
Your Crown Jewels Live in a System Your SOC Does Not Watch July 2026 (Updated 19 Aug)
The 24-Hour Clock: The Cyber Security and Resilience Bill Is a Workforce Problem First July 2026
Two Zero-Days, One Lesson: Attackers Are Coming for Your Control Plane July 2026
Patched but Still Compromised July 2026
The Ransomware That Ran Itself July 2026
The Board Conversation Your CISO Isn't Having July 2026
Your First Security Hire Won't Save You July 2026
The Contract You Lost Before You Knew It Existed June 2026
The Breach Is Not an IT Incident. It Is a Balance Sheet Event the CFO Cannot Yet See. May 2026
The Infrastructure You Built Is the Attack Surface You Defend May 2026
Your Detection Architecture Is Facing the Wrong Direction May 2026
Cybersecurity Is No Longer a Line Item. It Is a Balance Sheet Event. May 2026
April in Review: Four Series, Thirteen Articles, and the Question That Connects Them All May 2026
NIS2 and the Frontline: Why Compliance Now Depends on Every Employee in the Building May 2026
The CTO’s Infrastructure Debt: When Technical Decisions Become Regulatory Exposure May 2026
The CISO’s NIS2 Burden: Ten Obligations, One Team, No Room for Failure April 2026
NIS2 Enforcement Is Live. 84% of Organisations Are Not Ready. April 2026
The CTO’s Evolving Security Mandate: Why Technology Strategy and Security Governance Are No Longer Separate Conversations April 2026
The Speed Paradox: When Velocity Becomes Vulnerability April 2026
The CISO’s Dilemma: Accountability Without Authority, Regulation Without Capacity April 2026
The Board’s Blind Spot: Why Cyber Risk Is a Governance Failure, Not a Technology Problem April 2026
The Talent You Need Is Not Coming. Build It, Buy It, or Borrow It. April 2026
AI Is Not Replacing Recruiters. It Is Replacing Bad Recruitment. April 2026
The Talent Gap Is Not a Hiring Problem. It Is a Strategy Problem. April 2026
The AI Assurance Gap: Why Policy Without Proof Is the Biggest Risk on Your Balance Sheet April 2026
The AI Accountability Shift: Why Closing the Oversight Gap Is Now a Board Mandate April 2026
The AI Oversight Gap: Why Compliance Alone Won’t Save You in 2026 April 2026
AI Compliance Is the Next Frontier. Most Aren't Ready April 2026
March in Review: Three Problems, One Root Cause March 2026
DORA Is Live. What Financial Services Firms Need to Do Now March 2026
NIS2 Compliance: The Gap Between Directive and Delivery February 2026
Tools Are Not Architecture: The Six Pillars of a Mature Security Framework February 2026
Half of UK Businesses Had a Breach Last Year. Most Still Don't Know Why. February 2026
Why Having the Right Cybersecurity Talent Is No Longer Optional January 2026
The CISO's Biggest Problem Isn't Technical. It's Language January 2026
Zero Trust Is a Strategy, Not a Product. Here's the Difference December 2025
Hiring Security Leaders: What Boards Get Wrong November 2025