Insights
Analysis, regulatory guidance and threat research for security and risk leaders.
Our threat research team came across a fake identity-verification page in the wild and decided to follow it all the way down — by hand, without ever executing a single stage. What we found was a four-stage macOS attack chain that resolves its own command-and-control address...
Read the article
The CREST logo appears on a large number of cyber security supplier websites, usually somewhere near the bottom of the homepage, alongside ISO 27001 and Cyber Essentials. Most buyers read it as a single...
Read the article
CREST Security Operations accreditation assesses a provider against six domains, from how tools are approved to how analyst shifts are managed and what happens when a client leaves. Here is what the standard covers,...
Read the article
Annual attestation tells you the controls existed on a given day. It doesn't tell you what they're doing three months later. Why treating Swift CSP as an annual project is the wrong approach -...
Read the article
The shift from cyber security to cyber resilience is being driven by a simple reality: disruption is no longer avoidable. In a world shaped by geopolitical tension, financial systems are increasingly targeted as part...
Read the article
The Cyber Assessment Framework (CAF) has been the most important compliance benchmark for public sector organisations and operators of essential services in the UK for many years. Recently, CAF v4 has replaced CAF v3.2...
Read the article
In January 2026, attackers breached eScan Antivirus' regional update infrastructure and turned a routine software update into a malware delivery mechanism. This whitepaper breaks down the technical anatomy of the attack, what our SOC...
Read the article
India's digital economy is expanding fast - and so is its cyber threat surface. Talanos, the UK-based cyber security firm, has announced its entry into the Indian market, partnering with CTO Naveen Sharma to...
Read the article
Compromised credentials, negligent staff, and malicious insiders now account for over a third of UK data breaches. This guide breaks down the top UK Managed Security Service Providers (MSSPs) specialising in insider threat detection...
Read the article
Discover why a fast-growing SaaS platform in the insurance sector partnered with Talanos to achieve 24/7 security operations without building an in-house SOC. This case explores how they improved visibility, reduced manual workload, and...
Read the articleThirty minutes with a Talanos consultant to work through where you actually stand — no obligation, no sales script.