If you’ve seen headlines this week about a “critical flaw affecting 70% of the internet” and felt your stomach drop slightly, take a breath. Here’s what’s actually going on, in plain English, and four things worth checking today. What actually happened Most websites — including an awful lot that small and medium-sized businesses use without
What Is PHP2Shell, and Does My Business Need to Worry? Read More »
On Sunday night, staff at hundreds of French supermarkets arrived at work to find the freezers warm, the food spoiled and, in a few stores, equipment that had overheated so badly it had started to burn. Nobody had broken in. The attackers had logged into the systems that control the fridges and told them to
Short answer: no. Slightly longer answer: no, and the difference is worth five minutes of your time, because getting it wrong in a tender response or a job description is one of those small mistakes that quietly tells a reader you haven’t quite done your homework. We hear the two terms swapped constantly — in
Information security vs cyber security: are they actually the same thing? Read More »
If you’ve had an email recently telling you your data was caught up in a “cyber security incident”, Manchester Airport’s recent breach notification will be a familiar shape to a lot of people right now. The natural reaction is to read it once, feel briefly uneasy, and then do nothing with it. That’s understandable. Most
Got a Data Breach Email? Here’s What to Actually Do Read More »
The National Cyber Security Centre published new guidance in late July on recovering from a disruptive cyber attack. It’s genuinely good advice, but it’s written for organisations with a CISO, a Board and a dedicated IT team. If you run a smaller business, some of it won’t map onto your world at all. Here’s what
What to do when a cyber attack hits your business (in plain English) Read More »
In July, a company called Hugging Face got hacked. Hugging Face is a platform that hosts AI models and datasets, used by developers all over the world. What made this one different is who did the hacking: an AI system belonging to OpenAI, which had been let loose in a test environment, escaped it, and
When Your Supplier Has a Bad Day, You Have One Too Read More »
If you’ve ever sat in a meeting where these two terms got used interchangeably, you’re not alone. I hear it all the time, and honestly it’s an easy mix-up to make. Both are about keeping information safe. Both show up in the same policies, the same training programmes, sometimes even the same job title. But
Data Protection and Information Security: What’s the Difference? Read More »
ISO Spaghetti: Making Sense of the Standards You Keep Hearing About If you work in any kind of professional role, you have probably come across ISO standards. They get mentioned in tender documents, supplier questionnaires, job adverts, and LinkedIn profiles. ISO 27001. ISO 22301. ISO 31000. Sometimes all three in the same sentence. But what
ISO Spaghetti: Making Sense of the Standards You Keep Hearing About Read More »
When the Heat is On: the Information Security Risks Nobody Briefs Their Team About I was visiting a client a few summers ago when I noticed the server room door was propped open with a fire extinguisher. A desk fan had been placed just inside the doorway to push cooler air in. It was ingenious,
When the Heat is On: the Information Security Risks Nobody Briefs Their Team About Read More »
Is it a breach, a complaint, or a quality issue? Why getting that wrong matters Here’s a scenario that plays out in organisations more often than most people realise. A customer gets in touch, something has gone wrong, and the person who picks up the call does what feels natural — they apologise, fix it,
Is it a breach, a complaint, or a quality issue? Why getting that wrong matters Read More »
