Insights
Analysis and guidance on cybersecurity, regulatory obligation, and operational resilience — written for the people who carry the responsibility.
White papers
Longer-form research on what regulators and boards expect, written for a specific sector.
Written for FINMA-regulated fund managers. It covers what an IT and cybersecurity partner has to deliver and closes with 10 questions for the board to ask before renewing an IT contract.
Attackers hijacked refrigeration controllers at hundreds of French supermarkets, destroying stock within hours.
Citrix has patched eight critical NetScaler ADC and Gateway vulnerabilities, two already exploited in the wild, and this advisory explains the business risk, the patching and compromise-assessment steps leadership should approve this week, and what regulators under DORA, NIS2, the FCA, FINMA and GDPR will expect.
Check Point recorded an average of 1,515 weekly cyberattacks per organisation in Switzerland in August 2026, a 36 percent increase year on year. A separate survey published the same day found that Swiss boards lack the cyber expertise to match.
Manchester Airports Group suffered a data breach affecting around 8.8 million people across three UK airports. After MAG refused to pay a ransom, attackers leaked 550 GB of data, including contact details, vehicle registrations, and postcodes. Airport operations remained unaffected.
A Melbourne man's AI assistant exploited security flaws in a gym's booking API to reserve a class months in advance and remove another member from the waiting list. The agent, powered by OpenClaw and Claude, discovered that the system lacked basic authorisation checks.
On 4 August 2026, an attacker compromised the GitHub account of a keyv maintainer and injected credential-stealing malware into the library. A self-propagating worm then used stolen npm credentials to infect over 1,300 package versions, affecting libraries with a combined two billion monthly downloads.
Generative AI tools like ChatGPT and Claude are increasingly used in daily business workflows without IT oversight or clear policies. This rise of Shadow AI creates significant data security and governance risks, particularly for asset managers and SMEs handling sensitive client information.
Last week, Hugging Face disclosed a security incident that the industry had long theorised about but never quite seen in the wild: an autonomous AI agent, operating without human direction, compromising production infrastructure from end to end.
On 29–30 July 2026, attackers breached Liechtenstein's Register of Beneficial Owners and stole data on around 31,000 legal entities. The incident exposed sensitive ownership and control information, prompting authorities to take the register offline. No data modification or deletion was reported.
Two weeks after a US government directive withdrew Anthropic's most capable models from all users — including the restricted group created specifically to handle them — neither model has returned to service.
Vulnerability management is no longer about scanning systems and producing long lists of findings. Most organisations already have more vulnerabilities than they can fix immediately. The real challenge is prioritisation.
Not every cybersecurity incident becomes a crisis. But when cyber disruption affects customers, operations, revenue, safety, regulatory obligations, or public confidence, it becomes a business crisis.
Incident response is one of the clearest indicators of cybersecurity maturity. The question is not whether an organisation has a document called an incident response plan. The question is whether the organisation can execute it under pressure.
Threat intelligence is most valuable when it improves decisions. Too often, organisations collect threat feeds, reports, indicators, and alerts without translating them into action.
Cyber resilience is the ability of an organisation to prepare for, withstand, respond to, and recover from cyber disruption. It recognises a hard truth that not every attack can be prevented.
Cybersecurity insurance has become an important part of enterprise risk management, but it is often misunderstood. It does not replace security controls, incident response capability, governance, or operational resilience.
The EU Cyber Resilience Act introduces cybersecurity requirements for products with digital elements. It entered into force on 10 December 2024, making cybersecurity a product lifecycle obligation for manufacturers, software providers, importers, and distributors.
NIS2 represents a major expansion of cybersecurity expectations across the European Union, placing stronger emphasis on management responsibility, cyber risk governance, incident reporting, and supply chain security.
The EU Digital Operational Resilience Act entered into application on 17 January 2025 and applies to a broad range of financial entities. Its objective is to strengthen the ability of financial entities to withstand, respond to and recover from ICT-related disruption.
Governance, risk and compliance is often misunderstood as documentation, policy ownership, and audit preparation. Effective GRC should connect business objectives, risk appetite, controls, accountability, evidence, and decision-making.
Third-party risk management is moving beyond annual questionnaires and static due diligence packs. That model is no longer sufficient for the speed, complexity, and dependency levels of modern digital business.
The UK National Cyber Security Centre's Cyber Assessment Framework is designed to help organisations assess and improve cyber security and resilience, focusing on outcomes rather than simply prescribing a list of controls.
ISO/IEC 27001 remains one of the most recognised international standards for information security management. Its value lies not only in certification, but in the management system it creates.
Cyber hygiene refers to the foundational security practices that reduce the likelihood and impact of common attacks. It may not sound sophisticated, but it remains one of the most important areas of cybersecurity.
