- 092026Law firmsRead the analysis
The 2026 law firm breach wave: one convincing message is all it takes
Jones Day, HSF Kramer, Quinn Emanuel, Greenberg Traurig. Most of 2026's law firm breaches started with one person being deceived.
- 052026Social engineeringRead the analysis
Silent Ransom Group: the fake IT call that law firms keep answering
The FBI has warned twice about a group that phones lawyers pretending to be IT, then walks out with client files. Fox Rothschild is now being sued.
- 042026AI & agentic securityRead the analysis
ShareLeak and PipeLeak: how a web form can turn your AI agent against you
Text typed into a public form was enough to make Copilot Studio and Agentforce agents email customer data to an attacker.
- 092025Incident responseRead the analysis
Jaguar Land Rover: five weeks offline and the UK's costliest cyber attack
Production stopped for five weeks. The Cyber Monitoring Centre put the cost to the UK economy at £1.9bn, the highest on record.
- 082025AI & third-party riskRead the analysis
Salesloft Drift: when an AI chat integration became the way in
Stolen tokens from an AI chat agent let attackers export CRM data from hundreds of organisations, hunting for passwords and cloud keys.
- 072025InfrastructureRead the analysis
SharePoint ToolShell: why on-premises servers became a liability overnight
State-linked groups mass-exploited on-premises SharePoint, stole server keys and deployed ransomware. Patching alone was not enough.
- 042025UK legal sectorRead the analysis
Legal Aid Agency breach: criminal records, bank details and a sector left offline
Applicant data back to 1978, including criminal histories, was stolen. Legal aid firms lost their billing system for months.
- 042025Social engineeringRead the analysis
M&S and Co-op: how impersonating staff to the help desk cost hundreds of millions
Attackers reportedly talked their way past IT help desks. M&S lost online sales for 46 days and estimated a £300m profit hit.