Financial institutions have invested heavily in security, but more tools, policies and reporting do not necessarily mean greater resilience. Katie Barnett and Gavin Wilson look at the risks financial institutions should be paying closest attention to in 2026, from social engineering and physical security to third-party dependencies, insider threats and AI.
A convincing LinkedIn profile and a few mutual connections can make a stranger seem legitimate. Katie Barnett looks at how fake recruiter profiles can be used to build trust, gather information and create the groundwork for more targeted attacks.
Most people accept LinkedIn requests without a second thought, but attackers use the platform to gather intelligence and build trust. Learn how fake recruiter profiles and oversharing can expose your organisation to social engineering and phishing risks.
Technology alone cannot stop today’s cyber threats. While organisations continue to invest in advanced security tools, attackers increasingly target the people behind them. In this interview, Peter Connolly, CEO of Toro Solutions, explains why human behaviour has become the primary attack surface in modern security, how criminals exploit trust through social engineering and AI-powered attacks, and why building a culture of resilience is critical to protecting organisations. He also explores the convergence of cyber, physical and human security, and the leadership capabilities needed to stay ahead of an evolving threat landscape.
From ticket fraud to credential theft, explore how World Cup 2026 scams blur the lines between cyber, physical and people security risks.
Discover the indicators that your organisation is ready for Red Team testing and how realistic adversary simulations can help strengthen resilience across cyber, physical and human security.
Physical penetration testing reveals how attackers exploit weaknesses in people, processes and premises. Discover why testing physical security is a critical part of organisational resilience.
Why compliance does not always equal resilience. Explore the gap between security on paper and security in practice and how real attackers exploit operational weaknesses.
From Phishing to Deepfakes, here are ten of the biggest cyber security risks that UK businesses should be thinking about in 2026.
Learn how to recognise and respond to social engineering attempts with practical steps to verify requests, limit information sharing and reduce organisational risk.
Cyber incident response is not simply about fixing systems. It is about protecting the organisation as a whole when everything is under pressure.
The first few hours matter most. Calm, disciplined actions can prevent wider damage, preserve recovery options, and protect the organisation legally and financially.
