The Psychology of Passwords: A Deep Dive into the NCSC’s Three Random Words Strategy
A password is rarely created in a calm, deliberate moment where someone sits down and thinks carefully about security. More often, it is created in the middle of something else. Someone is setting up a new account, trying to regain access after being locked out, logging into a platform for
The Dark Web Decoded: Unveiling the Underbelly of the Internet.
Why the Dark Web Still Gets Misunderstood The dark web is often discussed in extremes. It is either framed as a hidden world of criminal activity or dismissed as something distant and irrelevant to everyday life. In practice, it sits somewhere in between, but most people never really engage with
AI Can Detect Threats — But It Can’t Fix Human Decisions
The Moment That Doesn’t Look Like Risk A message comes through on Teams. It appears to be from someone senior: short, direct, and straightforward. They need something sorted quickly. There is a sense of urgency, but nothing that feels unusual or out of character. Requests like this happen all the
How Employees Actually Make Security Decisions at Work
The Reality of Workplace Decisions There’s an assumption built into most cybersecurity training. That when an employee is faced with something suspicious, they will recognise the moment, pause what they are doing, and apply what they have been taught. That they will step out of the flow of work, assess
What Is Behaviour-Led Cybersecurity Training?
In our previous article, Why Knowledge Alone Isn’t Enough, we explored why traditional cybersecurity awareness training often fails to prevent real-world cyber incidents. Cybersecurity incidents are frequently attributed to human error. An employee clicked a malicious link, approved a fraudulent payment, or shared information with someone they believed to be
Behaviour-Led Cybersecurity Training: Why Knowledge Alone Isn’t Enough
Cybersecurity has become part of everyday conversation in modern organisations. Major ransomware attacks, data breaches, and online fraud incidents are now widely reported in the news, and most employees are well aware that cyber criminals regularly target businesses through phishing emails, fraudulent messages, and other forms of social engineering. In
Why Charities Are Becoming a Prime Target for Cybercriminals
Charities occupy a unique position within society. They exist to support communities, protect vulnerable individuals, and address challenges that many other organisations are not equipped to handle. From local community initiatives to large international organisations, charities are built on trust — trust from donors, volunteers, beneficiaries, and the public. People
Data Theft in Law Firms: Why the Real Risk Isn’t Technical
Law firms are among the most trusted institutions in professional life. Clients disclose commercially sensitive strategies, personal histories, financial arrangements and future intentions on the understanding that those matters will be handled with discretion and care. Confidentiality is not a marketing claim within legal practice; it is an ethical obligation
The Cyber Security and Resilience Bill: What It Means for UK Businesses
At the time of writing, the Cyber Security and Resilience Bill is progressing through Committee Stage in the House of Commons. That means it is being examined line by line, debated, amended and refined before moving further through the legislative process. It is not yet law, and details may still
