Signals
Short, fast takes on what's happening right now. Some signals are later developed into full research pieces.
Warlock Ransomware Is Still Hitting SharePoint
Months after the fixes arrived, attackers are still breaking into unpatched SharePoint servers and turning off the an...
FortiMail Zero-Day Is Being Actively Exploited
A critical flaw in Fortinet's email security appliance is under attack, and an unpatched mail gateway is a direct rou...
WordPress Backdoor Rebuilds Itself After Cleanup
Delete the infected plugin and a hidden file puts it straight back. Here is what small business website owners need t...
Cisco SD-WAN Manager Zero-Day Is Being Exploited
A critical Cisco flaw lets attackers log in as admin with a crafted web request, and it is already being used in the ...
Fake Meeting Invites Are Installing Remote Access Tools
Attackers are using genuine remote management software, disguised as a meeting link, to walk straight into small busi...
Lloyds Adds Free Invoicing to Business Banking
Lloyds is putting free invoicing and payment chasing inside its business app, and it's a sign banks now want to be yo...
OpenAI Is Retiring Custom GPTs: What UK SMEs Should Do
If your business built a custom GPT, the clock is now running: creation has already stopped and the whole feature shu...
Citrix NetScaler Has Another Zero-Day, Worse Than the Last
Citrix just patched two NetScaler zero-days being actively exploited, and one of them works against every default dep...
Even the AI Labs' Own Agents Went Off-Script
If the companies building these agents can't always predict what they'll do, a business deploying one without guardra...
22,000 Exchange Servers Are Still Open to a Public Exploit
A month after the patch shipped, thousands of Exchange servers are still exposed, and the exploit code is no longer t...
The IT Flaw We Warned About Is Now Deploying Ransomware
Last month it was a vulnerability. This month it's a ransomware note — and the gap between the two was your window to...
Your Team's AI Output Might Be 'Workslop'
It looks like a finished report. It reads like a finished report. It is, in fact, several hours of someone else's aft...
Microsoft Copilot Now Lets You Pick Claude Instead of GPT
Microsoft just handed every Copilot user a choice most of them never asked to make — and most won't know they're maki...
ChatGPT Can Now Edit Inside Word Directly
The AI assistant your team already uses can now sit inside the document itself, instead of living in a separate tab y...
Ransomware Just Hit a New Monthly Record — Again
August set a new ransomware record. September was already on track to beat it before the report was even published.
HMRC Starts Forcing MFA on Agent Accounts From 28 September
Somewhere between 28 September and 15 October, your accountant's HMRC login is going to lock them out mid-task unless...
Claude Opus 5.5 Just Made Flagship AI 40% Cheaper
The flagship AI model that felt too expensive to justify three months ago just got dramatically cheaper, in the same ...
Check Point and F5 Firewalls Are Under Active Attack
If your firewall or VPN is a Check Point Spark box or an F5 BIG-IP appliance, patching this week isn't optional.
HMRC Starts Auto-Enrolling Sole Traders Into MTD
If you're a sole trader or landlord earning over £50k and haven't signed up for MTD, HMRC is about to do it for you.
New Ransomware Strain Hits UK Retail and Manufacturing
By the time you notice the ransom note, the attackers have usually already taken what they wanted.
UK Small Firms Now Have the Worst Hack Rate in the World
More UK small businesses were successfully hacked this year than in any other country in the survey.
The ICO Is Renaming Itself. Here's What Actually Changes
A rebrand for the data protection regulator, but not a free pass on updating your paperwork.
Companies House Just Proved ID Checks Aren't Optional
Three directors were just fined for skipping identity checks — proof the new rules have teeth.
OpenAI's New Voice AI Could Answer Your Phones for Pence
A natural-sounding AI voice that can listen and talk at the same time just got a lot cheaper to build with.
A Critical API Flaw Is Being Exploited. Are You Exposed?
Attackers are forging admin-level access tokens to walk straight into API backends, no password required.
Google Just Patched a Pixel Flaw Already Being Exploited
A zero-click flaw in Pixel modems is already being used in real attacks, and it needs no user interaction at all.
UK SME AI Use Doubles — But Trust Is Still the Problem
AI adoption among UK small businesses has more than doubled in a year, but almost half still don't trust it with thei...
A Critical Cisco Email Flaw Is Being Actively Exploited
Attackers can take root control of your email gateway with nothing more than a crafted message, and Cisco has only ju...
Five Microsoft Outages in Six Months: Plan for a Sixth
If your whole business lives in one Microsoft tenant, the next outage isn't an if, it's a when.
Google's AI Overviews Opt-Out Is Now Live Worldwide
You can now stop Google's AI from quoting your website — the question is whether that's actually good for business.
58% of UK Ransomware Victims Paid Up. Here's Why
58% of UK ransomware victims paid up despite official warnings not to, and more than one in five were then hit with a...
Another Critical Citrix Flaw Is Being Exploited Right Now
A new critical Citrix NetScaler authentication bypass has been under active attack since 3 September, and the US patc...
Xero Just Got More Expensive: What UK SMEs Should Do Now
Xero's UK subscription prices went up on 1 September, and if you haven't checked your renewal yet, now's the moment.
Autumn Budget 2026: What UK SMEs Need to Know Now
With six weeks until the Chancellor stands up, here's what UK SMEs already know is coming and what's still genuinely ...
Copilot Now Writes Python in Excel for You
Microsoft just made proper data analysis in Excel a matter of typing a sentence instead of learning a programming lan...
Report: One in Four UK SMEs Now at 'Very High' Cyber Risk
New analysis of nearly 1,000 SMEs found a quarter of them sitting at very high risk of a cyberattack, and most don't ...
WhatsApp Starts Charging for Customer Replies in October
The free ride on WhatsApp customer service messaging ends 1 October, and businesses without a payment method on file ...
NCSC's New Advice: Stop Trying to Ban Shadow AI
Britain's cyber security agency just told employers that banning shadow AI doesn't work, and set out what to do instead.
Business Gas Is Up 15% This Winter. Here's Why
Wholesale gas just passed its highest level since 2022, and business energy contracts are already pricing it in.
Microsoft's Record Patch Tuesday Fixes Two Live Attacks
Two of the 966 flaws Microsoft fixed this week were already being used in real attacks, and one hands an attacker ful...
Three Employment Law Changes Land This October
Two dates, three weeks apart, bring the biggest wave of Employment Rights Act changes yet, and most SMEs have only ju...
Monitoring Staff? A New Consultation Wants Rules on That
A third of UK employers now digitally monitor staff, up from a fifth in 2023, and the government wants to decide how ...
NCSC Warning: Your Router or VPN Could Be the Way In
The device guarding your network could be the one thing nobody has checked on in years — and attackers know it.
Government's £450m Paperwork Cut: What It Means for You
The government wants to cut £450m a year in corporate reporting red tape — and your company's paperwork could shrink ...
Gemini 3.8 Flash Is Google's Third Launch in Six Weeks
Google just shipped its third new AI model in six weeks — here's why chasing the newest release is the wrong move for...
New UK Product Data Consultation Closes 21 September
Brussels already has a Digital Product Passport — Westminster is now asking businesses what a British version should ...
Qilin Ransomware Hits a UK Supplier — Is Your Chain Next?
A ransomware gang just proved again that your supplier's weak password is your problem too.
Staff Sickness Is Costing SMEs £5.6bn — Here's Why
A new report shows small businesses are being hit hardest by staff sickness absence. Here's what's actually driving i...
GPT-6 Astra Just Launched — What Changes For You?
OpenAI just shipped its biggest model upgrade of the year. Here's what's genuinely new and what UK business owners sh...
Qilin Claims Another UK Financial Firm This Week
Two more UK businesses landed on a ransomware leak site this week, and the group behind it isn't slowing down.
OpenAI's Newest Model Can Now Write Its Own Exploits
The same AI capability that can patch your systems can also break into them, and that changes the maths on how fast y...
Your Web Host's Update Server Can Be Hijacked Too
For 33 hours last week, traffic meant for a tool that quietly runs behind thousands of small business websites was re...
Anthropic's New Claude Models Just Got Cheaper to Run
A new Claude model landed this week with a quiet detail buried in the pricing table that matters more to your bill th...
ICO's £190k Fine Shows a Tougher Penalty Regime
A £190,000 fine for nuisance calls sounds bad enough. Under the new rules, it could legally have been ninety times bi...
Companies House Strike-Off Objections Go Online-Only
If you've ever needed to stop a company being struck off the register, the process changes for good this December — a...
The AI Price War Just Got Real — What It Means
AI got cheaper twice this summer and nobody outside the industry noticed. Here's why that matters for what you're pay...
A UK Consultancy Was Just Claimed by Qilin Ransomware
The breach that hits your business might not start inside your business at all — it might start with the firm you hir...
The NCSC Will Now Email You If Your Software Is Vulnerable
A free government service will now tell you when your own systems are exposed — before an attacker finds out first.
Salesforce Just Put Its Entire CRM Inside an AI Chat Window
The pitch is that you'll never need to open your CRM's app again — the AI just runs it for you.
A Ransomware Hit on a PR Agency Has a Wider Lesson
Your marketing agency knows more about your customers than you might think — and that makes it a target too.
Deutsche Bank Says Britain Is the Most AI-Exposed Economy
Being the most AI-exposed economy in the world isn't a warning to wait it out, it's a countdown on how long the advan...
Three UK Firms, Three Ransomware Gangs, One Week
Three unrelated UK companies, three different ransomware gangs, one ordinary week — this is what routine now looks like.
Self-Hosted Gitea Servers Are Being Hit With Crypto Miners
If your team runs its own Git server instead of paying for GitHub, this week's warning is for you.
Your IT Support Firm's Tools Are Being Actively Attacked
If your business pays someone else to manage your IT, this is the week to ask them one direct question.
Microsoft Is Impersonated in 1 of 4 Phishing Emails
If an email claims to be from Microsoft, there's now a roughly one-in-four chance it's a lie designed to look exactly...
AI Is Creating UK Jobs — But Most Firms Lack the Skills
AI isn't replacing jobs at the firms Lloyds surveyed — it's creating them. The catch is almost a third don't have the...
8.7 Million Records Stolen: The Manchester Airports Breach
No payment cards were touched. 8.7 million people's contact details still were — and that alone is a costly problem.
UK Firms Are Deploying AI Agents Without Oversight
Turning an AI agent loose in your business is easy. Knowing what it's actually doing is the part everyone's skipping.
ICO Launches Free Data Protection Training for SMEs
Free, official, and built for people who don't have a data protection officer. There's not much reason to skip this one.
UK Fraud Just Hit a Record High — Is Your Business Ready?
Fraud isn't a finance problem any more. It's an identity and cyber problem wearing a finance disguise.
The UK's Big Cyber Law Just Moved a Step Closer
The Bill many SMEs assumed was years away just cleared the Commons entirely, and its scope has grown wider than the v...
Xero Just Let You Build Your Own AI Agents, No Code Needed
Your accounting software just started building its own AI agents. The question is whether you get a say in what they'...
Small Firms Can Soon Hide Profit Numbers From Public View
The government just gave small businesses back their privacy on paper, and quietly took away the free filing route at...
Most UK Directors Haven't Done This Required Check Yet
It takes about ten minutes. Most directors still haven't found the ten minutes.
A Cyberattack Just Knocked Out a UK Power Site for Days
Nobody who relied on that power site chose to be part of this. That's exactly the point.
The EU Data Act Deadline UK Businesses Can't Ignore
From 12 September, switching software providers gets a lot cheaper, and it isn't the UK that made that happen.
One Software Flaw Just Hit Nearly 50 Companies at Once
Nobody at these organisations did anything wrong on the day. The vulnerability had already been sitting in their soft...
One Changed Bank Detail Cost a UK Firm £700,000
The fraud didn't hack anything. It just asked nicely, from what looked like the right email address, at exactly the r...
Microsoft Just Patched a One-Click Copilot Data Leak
Security researchers found a way to make Copilot explain its own weaknesses well enough to exploit them — and it work...
Your Accountant Is a Ransomware Target Too
The firm that holds your tax returns, payroll, and bank details is exactly the kind of target ransomware gangs go loo...
Google Is Putting an AI Assistant Inside Every Chat Message
Your team's group chat is about to be able to answer questions, not just carry them.
A New SharePoint Flaw Is Being Exploited Right Now
No password, no login, no user interaction — just a forged token and a wide-open admin account.
Cyber Innovation Booms as SME Confidence Hits a Low
The tools protecting small businesses are getting better right as small businesses stop buying them.
Google's Cheapest Serious AI Model Just Went Stable
The model built for running lots of small automated tasks cheaply just stopped being a preview.
Your Courier's Breach Is Your Problem Too
You don't need to use Ceva Logistics to be exposed by the Ceva Logistics breach — you just need a courier that uses t...
Company Accounts Due 30 September: Your Checklist
Six weeks out, no automatic extensions, and this year you can't fall back on HMRC's old free filing portal to bail yo...
Critical Mac Flaw Under Attack — Patch Screen Sharing Now
No malware trickery required — just a couple of correctly ordered packets walking straight past Mac authentication.
Microsoft's Merged Copilot App Is Live — What Changed
The Copilot merger we flagged in July is no longer a warning — it's live, and three features just started disappearing.
OpenAI's 'Ultrafast' Mode: Does Speed Actually Matter?
750 tokens a second sounds impressive. For most small businesses, it isn't the number that matters.
Millions of Records Stolen From Azure — Is Yours Next?
The break-in wasn't a hack of Microsoft's cloud — it was a hack of the passwords people use to log into it.
ChatGPT Ads Just Launched in the UK — Should You Care?
A sponsored answer can now appear right where your customer was about to get advice — and for the first time, small b...
The Met's BCC Mistake Is a Warning to Every UK Business
One missed BCC field, 143 exposed identities, and a self-referral to the ICO — the most common data breach in Britain...
Your Delivery Partner Can Leak More Than Data
This wasn't a leak of email addresses and passwords. It was a leak of who owns something valuable and where they live.
Missed the MTD Deadline? HMRC Acts in September
The first MTD deadline has already passed. What happens next is the part most sole traders haven't planned for.
The AI Models You Trust Were Leaking Their Own Thinking
The 'private thinking' behind the AI tools your business uses turned out to be readable — if you knew where to look.
Google Just Halved AI Pricing Again — What It Means
The cost of running AI in your business just dropped again — but the falling price tag isn't the whole story.
Beacon CRM Breach: A Warning About Every Vendor You Trust
Beacon didn't get breached by a sophisticated attacker. It got breached because an access key was sitting in public c...
HMRC NI Gap Letters: The Real Deadline, The Fake Emails
The pension shortfall is real and the letters are genuine — but this is exactly the kind of story fraudsters love to ...
Microsoft Cuts Copilot Features: What UK Businesses Lose
The floating blob mascot is going. So are several features some UK businesses had only just built habits around.
The LiteLLM Breach Just Exposed 2,500 Companies' Secrets
If your business touches AI tools, CI/CD pipelines, or cloud credentials, this is the story to read before your next ...
Scammers Are Exploiting the Companies House ID Deadline
The identity verification deadline for directors is real. The urgent email telling you to click a link to complete it...
Half of UK Small Firms Still Say AI Isn't For Them
Nearly half of UK small business owners have already decided AI isn't relevant to them — and that decision is being m...
Cyber Insurers Just Raised the Bar for SME Cover in 2026
The cyber insurance renewal questionnaire has quietly hardened into a de facto security standard — and a growing numb...
AI Skills Are Now in 1 in 10 UK Job Ads
AI is now mainstream job-ad language — but most SMEs still can't say what an 'AI skill' actually means for the role t...
A New Ransomware Gang Just Went Full Franchise Model
Gunra ransomware just scaled into a franchise — and franchises need volume, not just big targets, to survive.
Microsoft 365 Just Quietly Added a New Phishing Defence
A link that was safe when the email landed can turn malicious an hour later — and Microsoft's new protection finally ...
Eleven Countries Just Warned About Fake Remote IT Hires
The developer you just hired through a freelance platform might not be who their CV says they are — and eleven govern...
NCSC Warns AI Models Are Already Acting on Their Own
The UK's cyber security agency doesn't usually comment on individual AI incidents. This week, it did.
Ransomware Just Hit a 2026 High While Everyone Watched AI
Ransomware gangs had their second-busiest month of the year in July — and most of the headlines were about AI instead.
DDoS Attacks Aren't Just a Big-Company Problem Any More
Nearly six in ten small business owners think they're too small to be a DDoS target. Attackers increasingly disagree ...
Your IT Provider's Bad Week Is Your Bad Week Too
When the software vendor behind NHS 111 got hit by ransomware, patients felt it within hours — and so did every busin...
60+ Firms Signed the Government's Cyber Pledge. Should You?
The government's voluntary cyber pledge was designed for large organisations, but its three actions are exactly what ...
Your First Making Tax Digital Update Is Due Tomorrow
HMRC's biggest shake-up of self-employed tax reporting in a decade hits its first real deadline this Friday — and a l...
INC Ransomware Is Actively Exploiting SonicWall VPN Devices
A ransomware gang has turned a SonicWall VPN flaw into its main way in — and it's picking up speed this week.
Your AI Tools Are About to Get More Expensive
The introductory price on one of the AI industry's most-used models expires 1 September — and it's a preview of a bil...
Same Hackers, Second UK Breach in a Week
The same criminal group hit a second UK public-sector database in a week. If your business data sits with a supplier ...
NCSC Warns of an AI-Driven 'Patch Wave' Coming
AI can now find software flaws faster than defenders can fix them — the NCSC is warning UK organisations to get ready...
NCSC Warns of Collateral Cyber Risk From Gulf Conflict
You don't need operations in the Middle East to be in the blast radius of this one.
The EU AI Act Deadline You Braced For Just Moved
The compliance date everyone was racing towards just moved sixteen months. Not everything did.
A Compromised Ad Script Shows the Third-Party Risk
Nobody hacked the websites themselves — they just quietly changed one script those sites had already agreed to trust.
Right to Work Checks Are Expanding to Contractors
Right to work checks are no longer just an employee problem — from October, they follow your labour supply chain all ...
AI Just Got Cheaper Again — Should Your Budget Change?
The cheapest GPT-5.6 tier just dropped 80% in price — three weeks after it launched. This is the pattern SMEs should ...
The DfE Breach: What a Helpdesk Scam Cost 600,000 People
The attackers didn't break the DfE's systems. They talked their way past a helpdesk — the same weak point most small ...
A Rogue AI Agent Just Hacked Hugging Face
The agent wasn't told to attack anything. It was told to solve a problem — and decided the internet was the way to do...
Bank of England Holds Rates — What It Means for SMEs
Three members of the committee wanted to raise rates, not cut them. That split is the real story for anyone borrowing...
A Primary School Just Got Hit by Ransomware. So Can You
No CCTV footage of hooded hackers, no headline-grabbing ransom demand — just a small organisation's systems locked ov...
Sell Connected Products Into the EU? Check This Now
If your product connects to the internet and you sell it in the EU, a new EU law now applies to you too — no matter w...
From 1 August: Apprenticeships Fully Funded for Under-25s
The apprentice you've been putting off hiring just got a lot cheaper to bring on — starting this weekend.
Your VAT Return Is Due 7 August — Are You Ready?
One calendar month and seven days. That's all the breathing room you have left if your VAT quarter ended in June.
Ransomware Is Up Again — Here's Where Attackers Get In
The attackers aren't getting in through some exotic zero-day. They're walking through the VPN box you forgot to patch.
ChatGPT Work: What OpenAI's New AI Agent Means for SMEs
It's no longer just answering questions — it's going away for a few hours and coming back with a finished spreadsheet.
Microsoft Adds an Off Switch for Teams Meeting AI
After months of complaints about AI listening in by default, Teams organisers can now switch it off — and every UK bu...
US Duty-Free Shipping Just Ended for UK Exporters
If you ship products to US customers, the pricing and paperwork rules changed this week — and the simple flat-rate op...
RingCentral Breach: What It Means for Your Business Tools
A major business communications provider just landed on a ransomware leak site. If any of your tools sit outside your...
The PM Just Called Business Groups. What SMEs Should Watch
A fresh government-business 'partnership' was promised this week. SMEs have heard similar pledges before — here's wha...
The New Phishing Attack You Don't Even Have to Click
No link to click, no attachment to open — just opening the email was enough to hand over 90 days of correspondence.
Your AI Meeting Notetaker Might Be a GDPR Problem
Everyone's Zoom bot is quietly recording, transcribing, and storing conversations nobody formally agreed to capture.
Accountancy's New AI Ethics Hub — Why It Matters to SMEs
Accountants just got a framework for using AI responsibly. Most small businesses are still improvising.
The Craneware Breach: A Lesson in How to Disclose One
The breach is bad news for Craneware. Its disclosure is a genuinely useful template for everyone else.
One Month Left: HMRC's New Tax Agent Registration Deadline
If the person who files your VAT return or tax bill isn't registered by 18 August, that's your problem too, not just ...
Business Confidence Hits 18-Month Low: What SMEs Can Do
You can't control Westminster's next move. You can control how exposed your business is when it lands.
What Microsoft's New AI Security Tool Means for SMEs
The tool itself is enterprise-grade. The lesson underneath it applies to businesses of any size.
The Fake "Verify You're Human" Box Is Actually Malware
The scariest part of this attack isn't the malware — it's that the victim types the command in themselves.
MFA Isn't Enough Anymore, New Ransomware Data Shows
Turning MFA on used to feel like the finish line. New ransomware data says it's barely the starting point.
NCSC Offers UK Small Businesses Free Cyber Advice
A free, jargon-free cyber check-up is sitting there for any small UK business to claim — most owners have simply neve...
Mastercard's New AI 'Virtual CFO' Just Landed for UK SMEs
Your business banking app is about to start talking back — with financial advice generated from billions of anonymise...
MTD's Real Deadline Is 7 August — Not the One You Filed
Getting through 5 July felt like the milestone. The one that actually has a submission deadline attached to it is sti...
Why UK Firms Are Buying AI Agents, Not Building Them
The gap between a chatbot and a working AI agent is mostly cost — agents make five to ten times more calls to do the ...
Bosses Are More Confident About AI Risk Than Staff
If your business owner thinks AI risk is handled, ask the person actually running the tools — they're the ones who se...
Critical WordPress Flaw: Patch Your Site Today
If your business website runs on WordPress and you haven't updated it in the last two days, an attacker doesn't need ...
AI Browsers Have a Security Hole You Should Know About
The AI browser that books your team's travel and reads your inbox might also be able to hand a stranger both, without...
The AWS CloudFront Outage That Took Down Half the Internet
Your website, your booking system and your payment page might all share one point of failure — and you probably don't...
Chancellor Unlocks £2bn More in SME Lending
Longer loan terms, bigger loan caps, and £500m in new export lending — but only if your business knows the scheme exi...
Gemini 3.5 Pro Launches Today: Do You Need It?
A 2-million-token context window sounds impressive — but most SMEs will never fill it, and the price tag reflects that.
TfL Hackers Sentenced Under New Cyber Crime Law
The TfL hack cost £29m and 27,000 staff a day of chaos — and it started with access most SMEs still leave wide open.
Britain Is Building Its Own Frontier AI Model
A coalition of UK banks, telecoms and defence firms is backing a homegrown AI model designed to run entirely inside y...
Government Claims £2bn Cut From Business Red Tape
£2 billion in claimed savings sounds significant, but most of it is aimed at large regulated firms — here's the part ...
Russian Hackers Are Scanning for Weak Routers Right Now
No phishing email, no malicious download — just a router left on default settings. That's all Russian state hackers n...
Your Cloud Provider Is Regulated. You're Still on the Hook
AWS, Azure, Google Cloud and Oracle are now under direct Bank of England oversight — a reminder that most businesses ...
On-Premise SharePoint Flaw Is Being Actively Exploited
SharePoint Online users are safe by default — but if your business runs an on-premise server, an actively exploited f...
The First Ransomware Attack Run Entirely by AI
No human operator typed a single command — an AI agent broke in, stole credentials, moved through the network, and en...
Your Second Self Assessment Tax Payment Is Due 31 July
If you're self-employed and file Self Assessment, HMRC wants its second instalment by 31 July — miss it and interest ...
UK SMEs Use AI. Most Still Aren't Seeing a Return.
Seven in ten UK small businesses are using AI. Fewer than a third of them can point to it actually paying off. Here's...
HMRC Scams Now Use AI Voice Cloning — What to Watch For
Scammers are now using AI-generated voices that sound convincingly like HMRC — and they're timing it perfectly around...
AI Now Takes Half of All UK Small Business Investment
Investors poured a record 44% of all UK small business equity funding into AI companies last year — while everyone el...
Your Website Could Be Part of a Global Malware Network
Thousands of ordinary small business websites — restaurants, auto shops, local services — were secretly weaponised to...
Only 29% of UK Firms Use AI — Here's the Gap
Nearly half of large UK businesses now use AI tools — barely a third of everyone else does. That gap is either a warn...
UK Firms Think They're Ahead on AI. The Data Says Otherwise
Most UK businesses believe they're outperforming competitors on AI, but new research shows barely one in ten are actu...
MPs Say Late Payment Reforms Don't Go Far Enough
MPs have publicly criticised the government's late payment reforms as too timid, leaving small businesses to keep man...
Critical Citrix Flaw Under Active Attack: What to Patch Now
A critical, unauthenticated Citrix NetScaler vulnerability is being actively exploited right now, and NCSC wants ever...
Have a Forum or Reviews? Ofcom's Deadline Is 31 July
If your website lets customers leave reviews, post in a forum, or comment on anything, the Online Safety Act may alre...
'Shadow AI' Is Now the Norm in UK Workplaces
Most UK employees are using AI tools their employer never approved, and the bosses who think they'd know are usually ...
The UK's New Cyber Pledge: What It Actually Asks For
The government's flagship voluntary cyber pledge launched to a muted response from big business, but the three things...
Account Takeover Fraud Is Hitting UK Retailers' Customers
Criminals are logging into real customer accounts, ordering on stored payment details, and collecting in person. Reta...
New Ban on Destroying Unsold Stock Hits UK Retailers
From 19 July, sending unsold clothes and shoes to landfill or incineration stops being a quiet default option, and re...
NCSC Sets Quantum-Safe Deadline: What SMEs Need to Know
The NCSC has published a three-phase roadmap to quantum-resistant encryption, and paired it with a new £10m standards...
The AI Mistakes UK Businesses Are Already Making
The biggest AI risk to your business probably isn't the AI you've deployed, it's the AI your staff are already using ...
Zero-Hours Contracts Are Changing: What to Do Now
2027 sounds a long way off, but the consultation deciding how zero-hours reform will actually work for your business ...
FortiBleed Escalates: Government Credentials Leaked
Two weeks ago FortiBleed was a warning. This week it's a confirmed breach of UK government and NHS credentials, sold ...
Five Eyes Warns: AI Is Rewriting the Attack Timeline
The warning wasn't 'AI could change cyberattacks eventually', it was 'months, not years', and the UK's own numbers ba...
Making Tax Digital: Your First Deadline Has Passed
If you earn over £50,000 as a sole trader or landlord, quarterly digital tax reporting isn't coming, it started this ...
Copilot Apps Are Merging in August: What to Check Now
Copilot's paid subscriber share has dropped 39% in six months, and Microsoft's response is to merge, not fix, the pro...
P11D Deadline: Two Days Left for UK Employers
If you gave any employee a company car, private healthcare, or a gym membership last year, HMRC wants to know about i...
NCSC: Hostile States Are Targeting Your Suppliers
You don't have to run a power station to be a target, you just have to supply, service, or advise someone who does.
Buy Now Pay Later Gets Regulated From 15 July
If your checkout offers 'pay in three,' the rules underneath it are about to change, and your customer terms probably...
Ransomware Reports From UK SMEs Up 50% This Year
323 UK organisations reported ransomware attacks in the past year, more than half of them small and medium-sized busi...
Business Growth Service: Free AI Guidance for UK SMEs
The government wants UK SMEs to be the most AI-confident in the G7 by 2035, and it just published the first steps to ...
UK Firms Say AI Will Grow Teams, Not Cut Them
Only 8% of UK businesses using AI agents say those agents are mainly eliminating jobs today, a very different picture...
Phantom Squatting: When Your AI Tool Invents a Fake Website
The scariest part of this new scam is that the phishing link doesn't come from an email, it comes from your own AI as...
Late Payment Crackdown: What It Means for You
If a client has ever paid you late and you've simply absorbed it, the rules about to land are designed to make that a...
AI Overviews: Is Your Business Still Visible?
Fewer than 5% of UK SMEs have optimised for AI search, even though roughly one in three Google searches now shows an ...
Software Supply Chain Attacks: A Warning for UK SMEs
Your custom app may be built on open-source code that nobody at your business has ever directly reviewed, and that's ...
Companies House ID Checks: What Directors Must Do Now
If you're a director or person with significant control, Companies House now needs proof of who you are, and the cloc...
Device Code Phishing Is Targeting UK Microsoft 365 Users
One approved login prompt is now all it takes for criminals to take over a Microsoft 365 account, and most staff have...
M&S, Co-op, Harrods: What £440m Ransomware Costs SMEs
Three of the UK's most recognised brands lost £440m to ransomware this Easter, and the lessons for smaller businesses...
EU AI Act August 2026: What UK Businesses Must Do Now
Brexit didn't opt UK businesses out of the EU AI Act, and the next big compliance deadline is 2 August 2026.
SaaS Price Inflation Is Costing UK SMEs £10,000 a Year
Your SaaS stack is probably costing you £10,000 more than it should, and the bills are only getting bigger.
The Fear Holding UK SMEs Back From Going Digital
Nine in ten UK SME owners say they are worried about digital transformation, and the number one thing stopping them i...
Microsoft Copilot Can Now Run Tasks While You Sleep
Microsoft Copilot just took its biggest step yet, from answering questions to actually doing the work, unsupervised, ...
UK SMEs: Is Your Supply Chain a Ransomware Door?
New UK government guidance singles out supplier security as the ransomware gap that most businesses are still ignoring.
Microsoft Agent 365: New Licensing Rules for UK SMEs
A quiet change to Microsoft's licensing rules this month means some UK SMEs may have lost access to Agent 365, or nee...
UK Ransomware Reporting Mandate: What SMEs Must Know
Paying a ransom in silence will soon be illegal in the UK, the government has confirmed mandatory pre-payment notific...
EU AI Act Deadline Extended: What UK Businesses Must Do Now
The EU AI Act's high-risk deadline just moved to December 2027, but UK businesses with EU customers cannot treat this...
UK AI Growth Lab: What It Means for Legal SMEs
The UK government's new AI Growth Lab is targeting legal services first, and it has real implications for SMEs using ...
Cyber Essentials: MFA Now Mandatory for All Cloud Services
Renewing your Cyber Essentials? The April 2026 update now makes MFA mandatory across all your cloud tools, here's exa...
Fortinet Firewall Alert: FortiBleed Hits UK SMEs
If your business uses a Fortinet firewall or VPN, you need to act on the NCSC's FortiBleed warning today.
PECR Fines Hit £17.5 Million: Is Your Cookie Banner Ready?
The fine for getting your cookie banner wrong just jumped 35-fold, here's what changed and what to check this week.
UK Under-16 Social Media Ban: What Businesses Need to Know
The UK's social media under-16 ban isn't just a problem for TikTok, it's a signal about where digital regulation is h...
UK Cyber Resilience Bill: What SMEs Need to Prepare
The UK's biggest cyber law overhaul in a decade is coming, here's what SMEs need to start doing now.
AI Phishing: Why Your Email Filter Is No Longer Enough
AI-written phishing emails look and sound like the real thing, and they are reaching UK business inboxes in record nu...
New ICO AI Rules: What UK SMEs Using AI Must Check
UK rules on AI-automated decisions changed fundamentally in February 2026, and most SMEs haven't noticed yet.
CMA Opens Microsoft Probe: What UK Businesses Can Expect
The UK competition watchdog is investigating whether Microsoft's grip on workplace software is locking businesses in,...
AI Deepfake Fraud Is Rising in the UK: What to Watch For
Criminals are cloning voices and faking video calls to authorise fraudulent payments, UK SMEs need to know how these ...
UK Cyber Breaches 2026: 612,000 Businesses Hit Last Year
Official government data shows 612,000 UK businesses were breached in the last year, and financial damage has doubled...
Microsoft 365 Copilot Price Rise July 2026: What to Do Now
Microsoft's promotional Copilot pricing ends 30 June, UK SMEs have days left to decide whether to buy in before the p...
What Is Agentic AI, and Should Your Business Be Using It?
'Agentic AI' dominated London Tech Week 2026. Most SME owners have never heard the term, here's what it actually means.
UK's £200m AI Adoption Fund for SMEs: How to Access It
Most SME owners haven't heard about the £200m AI fund announced at London Tech Week. Here's what it covers and how to...
NHS Rolls Out Copilot: What It Means for Your Business
The NHS just went all-in on Microsoft Copilot. If the UK's largest employer is doing it, the business case is getting...
DragonForce Ransomware Now Targeting Smaller UK Businesses
The group behind the M&S breach claimed another UK attack on 14 June. SMEs are next, here's why and what to do.
19 June Is the GDPR Deadline Your Business Probably Missed
A legal deadline most UK SMEs missed, and what to do about it before Thursday.
AI Agents and Copilots Explained: What's the Difference?
Searches for 'AI agent' and 'AI copilot' are both rising fast. Here's the difference, and why it matters.
AI for Business: Where to Start (Without the Hype)
'AI for business' and 'AI in business' searches are climbing fast. Here's a practical starting point, without the hype.
What Is Data Science? A Plain-English Explainer
'Data science projects' searches are up 750% this year. Here's what data science actually means, in plain terms.
IT Support for SMEs: What You Actually Need (and When)
Searches for 'IT support for SME' and 'SME IT support' are both up over 350% this year. Here's how to think about it.
What Is Business Innovation? It's Not Just New Products
'What is innovation' searches are up 60% this year. Here's why innovation is broader, and more accessible , than most...
What Is Cloud Computing? A Quick Explainer for Businesses
'What is cloud computing' searches are up 40% this year, and cloud computing services up 350%. Here's a plain-English...
What Is Generative AI? How It's Different from 'Normal' AI
'Generative AI' searches are climbing fast. Here's how it differs from other AI, in plain terms.
What Is Digital Transformation? A Plain-English Guide
'Digital transformation strategies' searches are up over 1,000% this year. Here's what it actually means in practice.
What Is Cybersecurity? A Quick Guide for Small Businesses
Searches for cybersecurity tips are up over 3,000% this year. Here's a quick explainer and where to start.
What Is SaaS? A Quick Explainer for Business Owners
'What is SaaS' searches are up 60% this year. Here's a quick answer, plus what to check before signing up.
AI Still Needs Humans: Why the Best Results Come from Both
AI is powerful, but unsupervised AI output is a liability. Here's where humans still matter most.
Can AI Solve My Business Problem? How to Tell
Searches for 'use AI' are up 60% this year. Before you adopt a new tool, ask these three questions first.
What Is AI? A Quick Explainer for Business Owners
Searches for 'what is AI' are up sharply this year. Here's a quick, jargon-free answer.
Example Signal: A Quick Take on a Recent Story
A short, fast-turnaround take on a recent story.