Passkeys in Real Life: Lost Phones, Multiple Devices, and Getting Started A few days ago I put together a visual explainer on how passkeys actually work. It got a brilliant response — but it also generated a couple of very relevant questions: “What if I lose my phone?” and “I use more than one device
Passkeys in Real Life: Lost Phones, Multiple Devices, and Getting Started Read More »
Spot the phish: 5 red flags in a dodgy email Phishing emails are getting better. The spelling mistakes and dodgy formatting that used to give them away? Largely a thing of the past. Today’s phishing attempts can look slick, professional, and entirely convincing — which is exactly what makes them dangerous. The good news is
How Passkeys Actually Work (in Plain English) Last week I wrote about passkeys — what they are, why the NCSC and GCHQ are telling us all to start using them, and what it means for organisations. The post got a lot of attention, and one comment in particular stuck with me. Someone asked: “Can we
Passwords Are on Their Way Out — Here’s What’s Replacing Them If you’ve been anywhere near the news this week, you might have spotted the head of GCHQ giving a fairly blunt message: stop using passwords and start using passkeys. It was part of a much bigger speech about cyber threats and national security, delivered
Passwords Are on Their Way Out — Here’s What’s Replacing Them Read More »
Having an ISO 27001 Certificate Doesn’t Mean Your ISMS Is Working The M&S story has been running for over a year now. The attack happened at Easter 2025, and this week the full-year figures landed: profits down 24%, with the cyber attack costing the business somewhere in the region of £300 million in lost operating
Having an ISO 27001 Certificate Doesn’t Mean Your ISMS Is Working Read More »
