Get a quote
SECURITY & AI

What's worth knowing

Security and AI stories worth your attention, picked and summed up in plain English, not aggregated for the sake of it.

Not sure where your business stands?

NCSC's free Cyber Action Toolkit is a solid, official, step-by-step checklist if you want to work through it yourself. Or skip the DIY, let me help you with it, and get in touch instead.

Get in touch
AI7 Oct 2026

Claude Now Runs Inside Salesforce, Slack, and Microsoft 365. Your Security Review Never Saw It Arrive.

AI agents are shipping as features inside the platforms businesses already use, so they never pass through a procurement review or a governance decision. The boardroom questions this raises are simple: how many agents do you have, what can they reach, and who is accountable if one is compromised.

The Cyber Security Hub, via LinkedIn ↗
Security6 Oct 2026

British Online Retail Giant ASOS Hacked

An unauthorised notification sent through ASOS's own app alleged a breach of its Snowflake environment and threatened to publish customer data. The NCSC is telling ASOS customers to assume they are affected and to watch for follow-up scam messages, even if they never saw the alert.

The Cyber Security Hub, via LinkedIn ↗
Security5 Oct 2026

Microsoft Urges Entra ID Administrators to Accelerate Passkey Migration

Microsoft is retiring SMS and voice-based sign-in for most Entra ID users from February 2027, and is already auto-enrolling SMS and voice users into passkey registration. Admins who do not chase down stragglers risk hitting the deadline with accounts still locked to a method about to disappear.

The Cyber Security Hub, via LinkedIn ↗
Security1 Oct 2026

Disruptive Cyber Attacks: Reducing Their Impact, Reducing the Risk

The NCSC brings together guidance on recovering from, preparing for and reducing the risk of a highly disruptive cyber attack, the kind that can take weeks or months to recover from and reach well beyond IT into customers, supply chains and finances.

National Cyber Security Centre ↗
Security24 Sept 2026

FBI Investigates Alleged Data Breach of Its Recruitment Portal

The ShinyHunters group claims to have stolen employee and applicant records from the FBI's jobs portal, and the bureau says it hasn't yet established whether the breach began inside its own systems or at a third-party provider supporting the site.

The Cyber Security Hub, via LinkedIn ↗
Security15 Sept 2026

Passkeys Improve Security and Usability for UK Government Services

UK government services are rolling out passkey sign-in through GOV.UK One Login, a faster and more secure alternative to passwords, though as commenters on the NCSC's own post point out, that security still depends on properly securing the device the passkey lives on.

National Cyber Security Centre, via LinkedIn ↗
Security15 Sept 2026

Revolut Data Breach Exposes Passports, Selfies and Financial Records After Fraudsters Impersonate Government Officials

Fraudsters used a spoofed government email domain, not a hack of Revolut's own systems, to talk staff into handing over passports, selfies and account records for around 700 customers, and are now threatening to leak the data unless a ransom is paid.

The Cyber Security Hub, via LinkedIn ↗
Security14 Sept 2026

Passkey-Themed Phishing Campaign Hijacks Microsoft Cloud Accounts

Attackers are impersonating IT support to talk employees through fake passkey and MFA registration steps, hijacking Microsoft 365 accounts without ever breaking passkey cryptography itself.

The Cyber Security Hub, via LinkedIn ↗
AI7 Sept 2026

The Hidden Risks of Shadow AI

The NCSC warns that most staff are already using AI tools their employer never approved, quietly moving sensitive company and customer data outside any security policy or oversight.

National Cyber Security Centre ↗