Insights
Analysis, regulatory guidance and threat research for security and risk leaders.
The terms EDR, XDR, MDR and SOC are often used interchangeably, when in fact they mean quite different things. This article outlines the differences and similarities between them, compares the levels of coverage offered and poses the questions you need to ask to find out which...
Read the article
If something were amiss in your environment right now, would you know? Threat hunting doesn't need an intelligence team. Start with your own blind spots, one person and one hypothesis at a time.
Read the article
Our threat research team came across a fake identity-verification page in the wild and decided to follow it all the way down - by hand, without ever executing a single stage. What we found...
Read the article
The CREST logo appears on a large number of cyber security supplier websites, usually somewhere near the bottom of the homepage, alongside ISO 27001 and Cyber Essentials. Most buyers read it as a single...
Read the article
CREST Security Operations accreditation assesses a provider against six domains, from how tools are approved to how analyst shifts are managed and what happens when a client leaves. Here is what the standard covers,...
Read the article
Annual attestation tells you the controls existed on a given day. It doesn't tell you what they're doing three months later. Why treating Swift CSP as an annual project is the wrong approach -...
Read the article
The shift from cyber security to cyber resilience is being driven by a simple reality: disruption is no longer avoidable. In a world shaped by geopolitical tension, financial systems are increasingly targeted as part...
Read the article
The Cyber Assessment Framework (CAF) has been the most important compliance benchmark for public sector organisations and operators of essential services in the UK for many years. Recently, CAF v4 has replaced CAF v3.2...
Read the article
In January 2026, attackers breached eScan Antivirus' regional update infrastructure and turned a routine software update into a malware delivery mechanism. This whitepaper breaks down the technical anatomy of the attack, what our SOC...
Read the article
India's digital economy is expanding fast - and so is its cyber threat surface. Talanos, the UK-based cyber security firm, has announced its entry into the Indian market, partnering with CTO Naveen Sharma to...
Read the articleThirty minutes with a Talanos consultant to work through where you actually stand — no obligation, no sales script.