News
Lessons from PHP2Shell Part 3: The Software You Can’t Touch
Many firewalls, storage devices and business systems contain their own copy of PHP, which only the vendor can update. This
News
Lessons from PHP2Shell Part 2: The Software You Can’t See
Containers make deployment easier, but they also hide the software inside them, including runtimes such as PHP. This is the
News
Lessons from PHP2Shell Part 1: The Software You Know
PHP2Shell showed that patching PHP is straightforward, but knowing every place PHP runs across an organisation is far harder. On
News
Meta Smart Glasses: Visible Policy
Smart glasses are no longer a glimpse of the future. Devices such as Meta’s Ray-Ban smart glasses are becoming increasingly
News
CE Plus and the Second-Sample Rule
When the latest Cyber Essentials updates came into effect this year, one change altered how Cyber Essentials Plus assessments are
News
We’ve Signed It. Have You?
The UK Government’s new Cyber Resilience Pledge isn’t asking organisations to reinvent their security strategy. Instead, it’s encouraging businesses to
News
Why Firms Are Investing in Cyber Assurance
For years, cyber security was often viewed as an IT issue. Important, certainly, but rarely a board-level priority unless something
News
What Is DCC and Where Does CE Fit In?
As cyber security requirements across the defence sector continue to evolve, many organisations are beginning to hear more about Defence
News
AI Isn’t the Risk. Lack of Governance Is.
Recent reports from the UK’s AI Security Institute have sparked plenty of headlines about AI systems taking unexpected actions during
News
The Rise of the Security Questionnaire
For years, supplier selection was largely driven by commercial factors. Price, capability, delivery times, reputation and a decent lunch presentation