Insights
Analysis, regulatory guidance and threat research for security and risk leaders.
A real-world incident shows how a supplier’s simple mistake left sensitive data exposed for months. Discover what went wrong, why traditional TPRM missed it, and practical steps IT, risk, and security leaders can take to prevent supplier failures from becoming their problem.
Read the article
What’s the difference between a vendor, supplier, and third party - and why does it matter in risk management? This blog explores the real impact of inconsistent labels on TPRM programs, and how to...
Read the article
In theory, grouping suppliers into high, medium, or low risk should make third-party risk management more efficient. In practice, inconsistent definitions, hidden vendors, rigid models, and limited resources often make it messy and ineffective....
Read the article
Your suppliers are part of your business – whether they manage your cloud, payroll, or IT. But what happens when they go down, get breached, or drop the ball? In this blog, we break...
Read the article
Most scaleups and mid-sized businesses either lack an incident response plan or have one that’s unusable when it matters most. This blog lays out a practical, five-layer framework for incident management - spanning crisis...
Read the article
How a threat actor exploited a known vulnerability in the Miniorange 2FA plugin to compromise a Wordpress site using a malicious WP Rock plugin, causing unexpected knock-on impacts to the company's email reputation, leading...
Read the article
Many companies rely on generic cybersecurity tools for threat intelligence—but these tools don’t reveal if your business is being actively targeted. Learn why tailored, context-aware threat intelligence is essential for staying ahead of modern...
Read the article
Midsize organisations in the UK are subject to a number of mandatory regulations relating to cybersecurity, data protection and data privacy. For IT, security and business leaders, navigating this landscape can be both complex...
Read the article
This threat advisory provides a detailed breakdown of a recent XWorm malware attack, revealing how attackers leveraged phishing emails, fileless execution, and process hollowing to infiltrate a target environment. By analysing the multi-stage attack...
Read the article
With over 77% of UK law firms experiencing cyber attacks in the past year, cybersecurity is no longer optional — it’s essential. From ransomware attacks to supply chain breaches, the legal sector is under...
Read the articleThirty minutes with a Talanos consultant to work through where you actually stand — no obligation, no sales script.