cyber security
PHP2Shell: what the leaked PHP vulnerabilities mean and what to do now
PHP2Shell are two critical remote code execution vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, which leaked before a fix was available
21 October 2026
The annual pen test is a relic of the past
AI has let software teams ship at a pace that once seemed unimaginable. But as delivery adapts to match it, security testing risks falling dangerously behind.
22 July 2026
What infosec actually needs before agentic AI gets the green light
The hardest part of adopting agentic engineering is less around the tooling but more about how we adopt safely.
22 July 2026
They say people are your weakest link... We think not
People aren’t the problem in cyber security - they’re the target. Design drives error, culture drives strength and leadership turns both into resilience.
15 October 2025
Cyber Resilience Audit - the ultimate test for Critical National Infrastructure
Cyber attacks can halt a nation. Think dark grids, dry taps and silent hospitals. CNI is under siege - but what can we do about it?
10 September 2025
Striking the balance - trust, quality and security in the age of AI
As more organisations join the race to embed machine learning into their products and workflows, one question persists: Are we trading security for speed?
23 June 2025
Are your developers AI ready? Part 3 - embedding a security-first mindset
In the age of AI tooling, engineering and delivery teams must adopt a security-first approach to software engineering. Failure to do so exposes your systems to significant additional risk.
26 May 2025
Are your developers AI ready? Part 2 - resolving the skills paradox
The tools designed to help everyone write better code are most effective in the hands of programmers who are already good
22 May 2025
Are your developers AI ready? Part 1 - getting the foundations right
AI might be changing how we develop code, but usage must be built on top of strong engineering and cyber foundations.
12 May 2025
What could go wrong? Rethinking security in regulated sectors
A breach doesn’t just hit the bottom line, it can ripple across markets and services and affect people’s lives. That’s why Threat Modelling matters.
01 May 2025
Preparing for the inevitable. Why Cyber Incident Exercising (CIE) is critical for financial institutions
Why Cyber Incident Exercising is Critical for Financial Institutions
27 March 2025
Guide to implementing UK Code of Practice for the cyber security of AI
Secure AI is about trust, resilience & advantage. The UK’s AI Cyber Security Code of Practice offers a framework to embed robust, secure AI adoption across your organisation.