Latest Insights and Cybersecurity Resources

Navigating the UK Cybersecurity Regulatory Landscape: A Guide for Medium-Sized Enterprises

Navigating the UK Cybersecurity Regulatory Landscape: A Guide for Medium-Sized...


Andrew Papastefanou

Midsize organisations in the UK are subject to a number of mandatory regulations relating to cybersecurity, data protection and data privacy. For IT, security and business leaders, navigating this landscape can be both complex and challenging. Download our summary of the most relevant regulations, key standards and upcoming legislation to best position your organisation to avoid the pitfalls of non-compliance and foster trust amongst your customers, partners and other key stakeholders.

Continue
Threat Advisory: Obfuscation and process hollowing with GOO and XWorm

Threat Advisory: Obfuscation and process hollowing with GOO and XWorm


Andrew Papastefanou

This threat advisory provides a detailed breakdown of a recent XWorm malware attack, revealing how attackers leveraged phishing emails, fileless execution, and process hollowing to infiltrate a target environment. By analysing the multi-stage attack chain, security professionals gain insights into obfuscation techniques, persistence mechanisms, and credential theft strategies used by adversaries.

The attack occurred just before Christmas, highlighting the increased risk of cyber threats during holidays when security teams may be understaffed. This real-world case study demonstrates how Managed Detection and Response (MDR) teams detected and mitigated the attack, offering practical takeaways for improving threat detection and response.

By reading this advisory, cybersecurity professionals can stay informed about emerging threats, learn how attacks unfold and enhance their defensive strategies. With insights from real incident response efforts, security teams can fine-tune detection rules, strengthen phishing defences and increase vigilance during high-risk periods.

Continue
CREST SOC accreditation: What it means for our customers

CREST SOC accreditation: What it means for our customers


Andrew Papastefanou

At Talanos Cybersecurity, safeguarding your digital assets is personal to us. Our CREST SOC Accreditation reflects our dedication to delivering top-tier 24/7 cybersecurity services. Trust us to protect your business with cutting-edge tools, expert staff, industry-recognised processes and without compromise.

Continue
CREST
Securing the Law Firm

Securing the Law Firm


Chris White

With over 77% of UK law firms experiencing cyber attacks in the past year, cybersecurity is no longer optional — it’s essential. From ransomware attacks to supply chain breaches, the legal sector is under siege. Cyber threats like phishing, insider risks, and unpatched systems can lead to massive disruption, reputational damage, and fines of up to 5% of turnover from regulators like the SRA and ICO. This article explores why law firms are vulnerable, what actions they must take, and how CIOs can build a compelling business case for greater cybersecurity investment.

Continue
An appeal for cyber incident and near miss stories

An appeal for cyber incident and near miss stories


Andrew Papastefanou
NCSC's "Defend as One" initiative depends wholly on its contributors and the more that people share, the more others will come forward and share. Members can only benefit from the growth of the community. The initiative is proving that sensitive information can be transformed into valuable insights, shared anonymously to bridge the gap between entities and between the public and private sector.
Continue
Defending law firms - A case for pre-attack intelligence in the legal sector

Defending law firms - A case for pre-attack intelligence in...


Andrew Papastefanou
Talanos Dark and Deep Web Intelligence service is offered as both a single point-in-time risk assessment report as well as an ongoing detection and response capability, without limitations on the number of domains, public facing IP addresses and VIP accounts monitored.
Continue