Katie Barnett, Toro’s Director of Cyber Security, was quoted in SC Media UK following incidents involving AI models from OpenAI and Anthropic during security testing. The article looks beyond the “rogue AI” headlines to examine what the incidents mean for CISOs, including agent permissions, sandboxing, monitoring and the need for greater visibility over how AI agents are being used.
Financial institutions have invested heavily in security, but more tools, policies and reporting do not necessarily mean greater resilience. Katie Barnett and Gavin Wilson look at the risks financial institutions should be paying closest attention to in 2026, from social engineering and physical security to third-party dependencies, insider threats and AI.
A convincing LinkedIn profile and a few mutual connections can make a stranger seem legitimate. Katie Barnett looks at how fake recruiter profiles can be used to build trust, gather information and create the groundwork for more targeted attacks.
Security budgets often increase after something has gone wrong. Katie Barnett looks at how CISOs can move away from reactive spending by making the case for security in terms the wider business already understands, from resilience and prioritisation to deals, downtime and risk.
Discover why security budgets remain reactive, how CISOs and CIOs can build stronger business cases for investment and practical ways to demonstrate security value beyond breaches.
Understand why cyber due diligence is essential before an acquisition. Identify hidden cyber risks, protect deal value and make informed investment decisions.
Prepare for Defence Cyber Certification (DCC) with confidence. Understand requirements, map existing controls, identify gaps, and streamline your path to compliance.
Cyber incident response is not simply about fixing systems. It is about protecting the organisation as a whole when everything is under pressure.
A Physical Security Review is a structured evaluation of how well an organisation’s physical environment protects its people, assets, and operations.
