risk management

Strong fintech security posture at risk via third-party weak links

Financial technology (fintech) companies have a strong security posture but are at risk from third-party weaknesses, according to analysis. In its latest report, SecurityScorecard stated that the fintech sector ranked highest of all sectors studied when it came to security posture, but it found potential third-party weak links could open the door to security breaches.…

Strong fintech security posture at risk via third-party weak links Read More »

It’s time to get to grips with DORA

It’s no surprise to me that financial services organisations missed the 17 January2025 deadline to be in compliance with the European Union’s Digital Operational Resilience Act (DORA). I personally have not met a CIO or CISO who thought this deadline was realistic.Even back in January, research from Orange Cyberdefense saw 43% of respondents in the…

It’s time to get to grips with DORA Read More »

Amid uncertainty, Armis becomes newest CVE numbering authority

Mitre’s Common Vulnerabilities and Exposures (CVE) Program – which last week came close to shutting down altogether amid a wide-ranging shakeup of the United States government – has designated cyber exposure management specialist Armis as a CVE Numbering Authority (CNA). This means it will be able to review and assign CVE identifiers to newly discovered…

Amid uncertainty, Armis becomes newest CVE numbering authority Read More »

UK SMEs losing over £3bn a year to cyber incidents

Small and medium-sized enterprises (SMEs) throughout the UK are losing £3.4bn every year as a result of inadequate and unfit-for-purpose cyber security measures, with more than 30% of businesses having no form of security protections in place whatsoever, and over a quarter being targeted multiple times every year, according to a report produced by Vodafone…

UK SMEs losing over £3bn a year to cyber incidents Read More »

How CISOs can counter the threat of nation state espionage

Over 80% of global companies are now using AI to improve business operations. AI has also become a feature of individuals’ daily lives as we interact with chatbots, voice assistants, or predictive search technologies. But as AI diffusion grows, so too do the risks associated with its misuse – particularly by nation state actors engaged…

How CISOs can counter the threat of nation state espionage Read More »

Secure software procurement in 2025: A call for accountability

The software security landscape is at an interesting juncture. As Jen Easterly, the former director of the Cybersecurity and Infrastructure Security Agency (CISA), pointed out, there is a lesson to be drawn from the automotive industry of the 1960s. Its approach to improving car safety by building better designs – including seatbelts, crumple zones, and…

Secure software procurement in 2025: A call for accountability Read More »

A guide to DORA compliance

The Digital Operational Resilience Act (DORA) came into force on 16 January 2023. Following a two-year implementation period, from 17 January 2025, financial organisations must fully comply with the new regulation, which aims to ensure they remain resilient to severe operational digital disruption. The act covers a number of aspects of cyber resiliency, auditability, and…

A guide to DORA compliance Read More »

Navigating the practicalities of AI regulation and legislation

Misusing artificial intelligence (AI) can have some very clear and expensive consequences. Movie studio Lionsgate recently joined a long list of organisations discovering that quotations and citations from generative AI (GenAI) systems need to be verified like any other source; Microsoft is being sued by a German journalist after Bing Copilot suggested he had committed crimes…

Navigating the practicalities of AI regulation and legislation Read More »

CISOs: Don’t rely solely on technical defences in 2025

Threats have been more sophisticated, unpredictable and harder to pin down. Attackers don’t just exploit technical weaknesses – they target human behaviour, organisational blind spots, and even regulatory loopholes. From spear phishing and deepfake fraud to misinformation generated by artificial intelligence (AI), cyber criminals are using emerging technologies to launch attacks with precision and ease.…

CISOs: Don’t rely solely on technical defences in 2025 Read More »

Overcoming the cyber paradox: Shrinking budgets – growing threats

Recent years have seen a general cost-cutting in organisations caused by economic pressures. Many organisations have seen a fall in customer demand due to the cost-of-living crisis, as well as inflationary pressures affecting costs. Higher interest rates, increasing organisations’ cost of capital, are another factor. There’s also a sense of fatigue associated with spending on…

Overcoming the cyber paradox: Shrinking budgets – growing threats Read More »

Shopping Cart
Shopping cart0
There are no products in the cart!
Continue shopping
0
Scroll to Top