When the ICO set out how we would regulate during COVID-19 I wrote of the importance of regulators taking account of the larger social and economic context. Original article here

Some happy thoughts for you…: […] For example, if a state-sponsored hackers or a criminal organization were to gain access to a medical device used by a high-profile target, the […]

We like free (as in beer) stuff. As this one is from the UK government it probably won’t lead to you or your employees being pestered for a “follow up” […]

A few years ago I founded a business that measured cyber risk based on the factors that the insurance markets considered the most meaningful, but also ones that could actually […]

Today’s firedrill is…: A critical vulnerability, carrying a severity score of 10 out of 10 on the CvSS scale, has been disclosed for SAP customers. SAP’s widely deployed collection of […]

Data Viper, a security startup that provides access to some 15 billion usernames, passwords and other information exposed in more than 8,000 website breaches, has itself been hacked and its […]

It’s unclear wether this is actually a security breach, or something more personal…: […] Troia’s full statement is below: “When people think they are above the law, they get sloppy. […]

Around the wort there has been astonishingly rapid digital transformation. Here’s a look at Singapore..: […] During the circuit breaker, you may have come across this meme: “Who led the […]

Cyber offence isn’t something that CISOs generally invest in. For nation-states it seems that defence is where the investment should be going also…: […] Cyber superpowers cannot easily or effectively […]

Now that China/UK relations are at the worst they’ve been for some time it’s difficult to disentangle political statements about ‘attacks’ and the actual risk. The NCSC aren’t backing up […]