Insights
Expert analysis on cybersecurity, resilience and governance for UK business leaders.
SQL Server Zero-Days Hand Attackers Database Kingdom Keys
Microsoft's SQL Server CVE-2026-21262 vulnerability allows attackers to bypass authentication and gain sysadmin privileges. UK organisations must reassess their database security posture beyond basic authentication controls.
Read article →
Data Centers Become War Targets as Iran Strikes AWS Facilities
Iranian attacks on AWS infrastructure reveal how geopolitical conflicts now threaten business operations directly. UK organisations must reassess cloud resilience strategies as physical infrastructure becomes a kinetic target.
Read article →
Zero-Click Excel Bug Turns Copilot Into Corporate Data Thief
CVE-2026-26144 allows attackers to exploit Microsoft 365 Copilot through malicious Excel files, turning AI assistance into unauthorised data extraction. UK boards must urgently review AI governance frameworks.
Read article →
HR Departments Under Siege From 'BlackSanta' EDR-Killer Campaign
Russian malware campaign exploits recruitment workflows to disable security tools. HR departments become the new front line in sophisticated steganographic attacks bypassing traditional defences.
Read article →
Only One in Four Organisations Test Identity Recovery
New research reveals 75% of organisations skip identity recovery testing, creating a hidden weakness that turns cyber incidents into prolonged business disasters.
Read article →
Microsoft Just Made Passkeys Mandatory. Here Is What That Means.
Microsoft is auto-enabling passkeys across Entra ID tenants. UK businesses must prepare for mandatory passwordless authentication or face compliance and security risks.
Read article →
Why Cloud Attackers Stopped Caring About Your Passwords
Google's latest threat report reveals attackers are bypassing traditional access controls entirely, exploiting cloud applications directly rather than stealing credentials.
Read article →
Russian Malware Is Killing Your Security Tools Before You Know It
BlackSanta malware disables endpoint security at kernel level through HR recruitment attacks. Your EDR investment becomes worthless if attackers neutralise it before detection.
Read article →
The Cisco Flaw NCSC Is Warning About Right Now
NCSC confirms active exploitation of CVE-2026-20127 in Cisco SD-WAN devices. Critical patching required for UK businesses running affected Catalyst systems.
Read article →Strengthen your organisation's security posture
Join the PTG Cyber Intelligence Brief
Daily insights on cybersecurity, governance and resilience delivered to your inbox.
Ready to strengthen your cyber resilience?
Talk to our team about protecting your organisation against evolving threats.
Get in Touch