Binance Hack: $6.3bn Theft Tests Digital Asset Resilience
Binance says $6.3bn was hit in the largest crypto theft on record. What we know, what’s still uncertain and what it means for boards and investors.
How Do You Know What to Patch When the World’s on Fire? Lessons from php2shell
php2shell hit almost every PHP install serving the web. Why patching everything at once is its own risk, and four ways to decide what to patch first.
Third-Party Cyber Risk: Five Supplier Failures in One Week
Third-party cyber risk lessons from five supplier failures in one week, and what regulators now expect.
The Other Half of the Incident Bill: Why Legal and Technical Response Must Move Together
Legal costs start when a cyber incident does. Why breach counsel and technical response must run together from the first hours.
The ASOS Breach: When a Customer Messaging Platform Becomes the Attack Surface
What the ASOS breach, and Denmark’s CPR breach the day before, tell boards, risk teams and investors about third-party cyber risk
Five Things AI-Assisted Attackers Left Behind
What our recent incident response engagements reveal about AI in the attack chain
Warranty or Insurance? Rethinking How Businesses Fund Cyber Risk
Insurance responds after a loss. A warranty is built to reduce how often you need it to. See how the two fit together, and the gap most businesses don't know they're carrying.
The Revolut Incident: When Trust Becomes the Attack Surface
Revolut's data breach after a fake government request shows attackers exploiting trust, not technology. Key lessons for banks, fintechs and digital asset firms.
Global Cyber Threat Briefing: August 2026
Stay ahead of the curve with Cyber Series, your essential update on the evolving threat landscape.
EU Cyber Resilience Act: Commission Publishes Implementation Guidance
Briefing for senior management and risk leadership | C(2026) 5252 final, Annex, 27 July 2026