PHP2Shell: What UK Firms With WordPress or PHP Sites Must Do Today
Last updated 21 October 2026. This is a fast-moving issue. Check the PHP and NCSC advisories for later changes. PHP2Shell is the name given to two critical flaws in PHP itself, the language behind WordPress, Drupal, Joomla, Magento and a ...
- All
- AI Consulting
- Awards
- Cloud Services
- Cyber Security
- IT Consultancy
- IT Procurement
- Managed IT Services
- Modern Workplace
- Press Releases
- Software Development
- Sustainability
- All
- AI Consulting
- Awards
- Cloud Services
- Cyber Security
- IT Consultancy
- IT Procurement
- Managed IT Services
- Modern Workplace
- Press Releases
- Software Development
- Sustainability
Application Identity Attacks: Why MFA Misses Them and How to Audit Your Tenant
Multi-factor authentication protects the people signing in. It does nothing about the applications you have already told Microsoft 365 to trust. Each of those has ...
Managed SOC vs Managed SIEM: What Each Does
A SIEM is a product. A SOC is a team. Almost every confusion between the two comes from that one distinction, and it matters commercially, ...
How to Choose a Managed SOC Provider (UK Guide)
Every managed SOC provider offers 24/7 monitoring, threat detection and rapid response. Most of them are telling the truth, which is exactly the problem. The ...
How a Managed SOC Works: What It Monitors and What It Costs
A finance director locks up on Friday thinking all is well. Over the weekend, an attacker runs a brute-force attack against the company’s remote desktop ...
G-Cloud 15: What Changed and How Public Sector Buyers Award Through It
G-Cloud 15 went live on 6 August 2026, and it is a bigger change than the version number suggests. It is the first G-Cloud agreement ...
Copilot Agent Governance: What Changes Now Agents Have Their Own Accounts
On 15 October Microsoft gave Copilot Studio agents something they did not have before: their own Microsoft 365 credentials. An agent can now hold an ...
Microsoft Digital Defense Report 2026: What UK Firms Should Do This Week
Two things landed within a fortnight of each other. Microsoft published its annual threat report, and then shipped the largest security update in its history: ...
Cybersecurity for SMEs: The Threats That Matter and the Controls That Stop Them
Most SMEs do not have a cybersecurity problem so much as a prioritisation problem. The tools are available and mostly affordable. What is missing is ...
What Is SSPM, and Do You Actually Need a Separate Tool
SSPM stands for SaaS Security Posture Management. It is the practice of checking the security settings inside the SaaS applications you already use, finding the ...
IT Procurement Solutions: What They Cover and How to Choose One
IT procurement solutions are the systems, contracts and services an organisation uses to buy technology: hardware, software licences, cloud and the services around them. The ...
The Cyber Security and Resilience Bill: What It Means If You Are Not Regulated
The Cyber Security and Resilience Bill will bring medium and large managed service providers into the UK’s NIS regulations for the first time, with a ...
What Is Microsoft Purview, and Do You Actually Need It
Microsoft Purview is Microsoft’s bundle of data security, governance and compliance tools for Microsoft 365, Azure, on-premises systems and other clouds. Most UK businesses running ...
Business Email Compromise: How the Fraud Works and How to Stop It
Business email compromise is fraud carried out through a real email account or a convincing imitation of one. No malware, no broken firewall. Someone asks ...
What Are Passkeys, and Should Your Business Use Them?
Passkeys replace the password with a key your device holds and confirms with your face, your fingerprint or a PIN. There is nothing to type, ...
AiTM Phishing: How Attackers Walk Straight Through MFA
AiTM phishing puts the attacker between you and the real login page. You type your password on what looks like the genuine site, you approve ...
Spear Phishing vs Phishing: What Actually Changes
Phishing is sent to thousands of people at once and hopes a few bite. Spear phishing is written for one person, using details about them ...
How UK SMEs Choose an AWS Partner for an On-Premise Move
An AWS Partner UK is a British company accredited by Amazon Web Services to design, migrate and run AWS environments. For an SME moving off ...
Phishing Simulations for UK Businesses: How They Work and What They Cost
A phishing simulation is a fake phishing email your organisation sends to its own staff, to find out who clicks, who reports it, and where ...
What Is a Cyber Health Check, and What Does It Cover?
A cyber health check is a structured look at how exposed your business is, covering the devices you own, who can get into them, whether ...
What Is a Virtual CISO, and Do You Need One?
A virtual CISO is an experienced security leader you bring in part-time rather than employ full-time. They set the security strategy, own the risk decisions ...
Do You Need an AI Acceptable Use Policy?
Your staff are already using AI. Not in a pilot, not after a business case, but today, in whatever tool they opened in a browser. ...
IT Support for Construction Companies
Most IT support is built around an office. A building, a fixed network, people at desks. Construction does not work like that, and a provider ...
What Is the Intelligent Client Function?
Outsourcing moves the work. It does not move the responsibility. Somebody inside your organisation still has to know what good looks like, judge whether you ...
Microsoft 365 Tenant to Tenant Migration: What Is Involved?
A tenant to tenant migration usually arrives with a deadline attached to it. A business has been bought, sold or merged, and somebody has promised ...
What Is an Intelligent Supplier, and Is Your IT Provider One?
Most IT contracts are judged on whether the supplier did what it promised. Uptime, response times, tickets closed. All of those can be green while ...
Exchange Server 2016 and 2019 End of Life: What to Do Before October 2026
If your business still runs its own Exchange mail server, you have a decision to make before the end of October 2026. Microsoft stopped supporting ...
Windows Server 2016 End of Life: What You Need to Do
Somewhere in most UK server rooms there’s a box still running Windows Server 2016. It works, nobody has touched it in years, and it quietly ...
What Should Be in a BYOD Policy?
Most teams already use personal phones for work. Someone answers email on their own iPhone at the weekend, someone else opens a client document on ...
Do You Need Security Awareness Training?
This guide is for UK business leaders deciding whether to invest in security awareness training, or whether the annual course they already run is doing ...
What Is Conditional Access in Microsoft 365?
If you run Microsoft 365 and someone has told you to turn on Conditional Access, this guide is for you. It covers the Conditional Access ...