Trending Topics
If you don’t trust your security vendor, you’re far from alone – here’s why
95% of IT decision makers don't trust their security vendors, according to new research from security vendor Sophos.
Trending
Protect
Protect is one of TechFinitive.com’s five key pillars. Here, we provide in-depth analysis of emerging threats to businesses along with a wealth of articles that will never go out of date – because the sad truth is that attackers will always be after our data.
We have a particular focus on ransomware, from simple guides to the key terms to the real-world after effects of a phishing attack. But we also want to provide practical advice on how to protect your business, whether that’s putting defensive measures in place or reminding people of the basics of cyber hygiene.
One of our key advantages is the depth and breadth of our writers’ experience. Davey Winder is one of the UK’s most respected cybersecurity journalists, having won numerous awards (it helps that he was once a hacker himself) and been covering cybersecurity ever since it became a “thing” in the 1990s.
We also draw on the knowledge that KG Orphinades earns in their day job, advising local small businesses on how to stay secure (KG also runs a website dedicated to VPNs). Last, and most definitely not least, Simon Edwards is CEO and founder of SE Labs, one of the world’s leading security testing labs, and a board member of the Anti-Malware Testing Standards Organization (AMTSO).
If you have a story that you would like to share – and we are happy to keep company names anonymous – then email us at [email protected], follow us on Twitter or join our community on LinkedIn.
How North Korean hackers turn legitimate infrastructure into an attack surface
New research from FortiGuard Labs has confirmed how North Korean hackers are using legitimate public infrastructure as command and control for campaigns targeting Windows users.
The most dangerous part of OpenClaw is that it sounds advanced
OpenClaw DDoS may sound like a new threat, but it exposes old weaknesses. This article explores why fundamentals, not complexity, determine resilience.
The US router ban hammer has been wielded – here’s why it’s so stupid
The US Federal Communications Commission has banned the sale of all new consumer routers made in foreign countries, which isn't as clever a move as it may sound
Is your organisation ready for AI-driven identity threats? The data says no
Discover why most organizations are unprepared for AI-driven identity threats, as IDC data reveals a widening gap between perceived security and true “verified trust”- and what leading firms are doing to close it.
The great mobile banking heist starts on your smartphone
Zimperium has uncovered 34 active malware families targeting 1,243 financial apps across 90 countries - Davey Winder explains what you need to know about its 2026 Mobile Banking Heist report
The cybercrime economy is embracing agentic AI — and that’s a problem
To defend against agentic AI attacks, you need to understand their methods - and that's exactly what the latest reports reveal
Mimecast kills the API email-security trade-off — but can ICES really replace a secure gateway?
Mimecast is making a bold claim: email security teams no longer need to choose between fast API deployment and deep gateway-grade protection.
Security is infrastructure. Fund it like infrastructure.
Cybersecurity is expected to deliver infrastructure-grade resilience, yet it’s funded like a bundled cost. This article explores why that economic mismatch must change.
Anthropic vs Trump timeline: making sense of the use of AI in war
We ignore the mudslinging words and attempt to search out the facts in the very unique war between Anthropic and Trump - and find out how the US is using AI during conflicts
Europol and Microsoft hit Tycoon 2FA with a typhoon of takedowns
Tycoon 2FA's three-year reign of terror is hopefully now over, following a Europol takedown led by Microsoft
BlackBerry Chief Security Officer: Lack of effective regulation makes Global South hugely attractive to attackers (and here’s how to fix it)
Christine Gadsby, Vice President and Chief Security Advisor of BlackBerry Secure Communications, has warned of the danger looming for the Global South during an MWC session focused on global governance.
NETSCOUT warns DDOS attacks are spreading from enterprises to all sizes – no-one is safe
NETSCOUT's 2H2025 DDoS Threat Intelligence Report, based on the latest data, reveals that not only are DDoS attacks on the rise but now every business with a digital footprint is a potential target
IBM X-Force Threat Intelligence Index reveals how cybercriminals are using AI – and how enterprises can fight back
IBM's latest X-Force Threat Intelligence Index says exploiting vulnerabilities is now the biggest route of attacks against enterprises' IT infrastructure - and cybercriminals are using AI to help them find and take advantage of such flaws.
Traditional DevSecOps has reached its scaling limit
Traditional DevSecOps no longer scales. Autonomous cloud security uses AI to deliver continuous, contextual risk management. Read more...
The open-source AI problem isn’t what you think it is
Black Duck's 2026 Open Source Security and Risk Analysis report makes for worrying reading, explains security expert Davey Winder, and much of the blame is organisations' unquestioned reliance AI
CrowdStrike’s 2026 Global Threat Report: Why breakout time has collapsed to 29 minutes
CrowdStrike's 2026 Global Threat Report reveals eCrime breakout time is down to 29 minutes, with 82% of attacks being malware-free.
Skating on thin ice: Why identity matters at major events
Major sporting events are prime cyber targets. This article explores why identity security and verifiable credentials are now essential to protect fans and organisers.
The AI attacks that your company should be on guard for
Attackers are using AI in a series of novel new ways to launch attacks on businesses, CrowdStrike's annual report warns
Copilot AI risks run deeper than Microsoft’s confidential email debacle
It turns out that even Microsoft's Copilot AI tools can leave you vulnerable, never mind what your employees might be using on the quiet