Latest Articles

Your hospital may have security policies, annual vulnerability scans and an incident response plan. But can you quickly prove that every system handling health information is covered, its risks have been assessed, and the controls protecting it are actually working? This is where the ADHICS guidelines can become difficult to apply. A healthcare organisation may […]

Most UK manufacturers tracking the EU CRA are watching one deadline. In fact, there are three, and they don’t land the same way. Compliance with the EU Cyber Resilience Act can be managed with the help of a checklist, enabling manufacturers to monitor the key stages and to plan for the compliance requirements in time. […]

On 31 July 2026, the Reserve Bank of India repealed 628 supervisory circulars in a single stroke. The Cyber Security Framework in Banks, the 2016 circular that had anchored most Indian bank security programmes for a decade, was repealed along with the other 628 circulars. In its place, the Department of Supervision issued 64 consolidated […]

In February 2024, a Canadian tribunal ruled that Air Canada was liable for its own customer service chatbot’s invented bereavement fare policy. The airline argued the chatbot was “a separate legal entity” responsible for its own words. The tribunal rejected that argument outright. No one governed what the model could say, and Air Canada paid […]

Testing a Jira extension starts with understanding what the app is allowed to do inside Jira. Some extensions can read or change project data, act through granted permissions, process user information, or send data to services outside Atlassian. A security flaw in any of those paths can create risk for the Jira environment that relies […]

CREST STAR-FS intelligence-led penetration tests provide UK financial organisations with a structured way to assess resilience against realistic cyber attacks. Unlike vulnerability testing alone, it relies on threat intelligence and attack simulations. These assess your organisation’s ability to defend, detect, and react in case of an attack when attackers target Important Business Services. In December […]

In July 2026, the UAE Cybersecurity Council said it had stopped a series of sophisticated cyberattacks targeting financial-sector organisations. The attacks tried to exploit security vulnerabilities, compromise digital systems and deploy malware. For a DFSA-regulated fintech, this raises a practical question: is a vulnerability scan enough to know whether your customer-facing systems are secure? A […]

CREST VAPT services in the Philippines help organisations determine whether their security controls can withstand real-world cyberattacks. Many businesses still rely on automated vulnerability scans that identify known weaknesses without showing how attackers could exploit or chain them. According to Fortinet’s 2026 Global Cybersecurity Skills Gap Report, 93% of organisations surveyed in the Philippines reported […]

From February 2026, the old CSA Cyber Trust Mark under Cyber Trust (2022) stopped being valid entirely. If your organisation is still working off the old framework, you’re preparing against a standard the Cyber Security Agency of Singapore no longer recognises. CSA publishes the current version, Cyber Trust (2025), as Singapore Standard SS 712:2025. It’s […]