• Sofa Series: The Intelligent SOC Shift

    We kicked off our first Sofa Series in style, with Ciaran Ball, Acora’s Head of Strategic Alliance – Cyber, Darren Humphries, Acora’s Group CISO and CTO Partner and Carl Pharoah, Securonix’s Cyber Security Specialist. With a few laughs along the…

    Read more
  • safeguarding AI in the workplace

    How to safeguard AI at every touchpoint, without slowing innovation

    Embracing the Era of Ubiquitous AI in the Workplace Today, one in three employees in Britain uses artificial intelligence (AI) as a part of their daily work routine. The AI development and uptake in the IT and telecom industries is…

    Read more
  • GitHub Breach - Empty Harvest - Acora CISO Commentary

    GitHub Breach: The Goal isn’t Zero Risk. It’s an Empty Harvest.

    Last week, Microsoft-owned GitHub confirmed that attackers exfiltrated data from internal repositories after a poisoned Visual Studio Code extension compromised an employee’s device, linked to the hacking group TeamPCP. In response to the ongoing series of software supply chain attacks,…

    Read more
  • identity verification measures to protect businesses from deepfake scams

    Identity Verification: the key to protecting your business from deepfake scams

    Is the evolving threat of impersonation killing visual trust? The 2025 Phishing by Industry Benchmarking Report reveals a rapid decline in the phishing click rate (globally, an 86% reduction) after 12 months of security training. But while you successfully minimise…

    Read more
  • Patching Vulnerability

    The 14-Day Window Just Got Real: Why Patching Is Becoming a Business Risk

    Over the past week, a series of incidents has made one thing clear: we’ve entered a new phase of vulnerability risk, and organisations aren’t ready for it. From the rapid exploitation of cPanel, to tightening regulatory expectations from Cyber Essentials,…

    Read more
  • CISO Commentary Rockstar Games Breach

    The Rockstar Breach Wasn’t an Outlier: It Was a Warning Shot

    Attackers are changing their economics, and for some time now, predictions have been circulating that supply chains would become the dominant attack model for cyber criminals. What we’re seeing now is those predictions materialising, and quickly.  The Rockstar Games breach didn’t just make headlines…

    Read more
  • AWS Security Issues & How to Overcome Them

    10 AWS Security Issues & How They Can be Addressed

    AWS is a leading cloud platform that offers many cloud services. Whilst AWS provides robust security features natively, sometimes enabled by default, misconfiguration can still occur, which can lead to vulnerabilities. In this article, we dive into 10 common AWS…

    Read more
  • MDM Takeover Prevention

    Security Advisory: MDM Takeover Prevention

    In March 2026, an Iran-linked threat actor compromised Stryker Corporation’s Microsoft Intune environment and executed a mass remote wipe of over 200,000 managed endpoints across 79 countries. This was not ransomware. There was no data exfiltration demand. The objective was…

    Read more
  • Is 2026 the end of the annual pen-test?

    The Obsolescence of “Point-in-Time” Security Pen testing helps you identify vulnerabilities in your infrastructure and applications before attackers can exploit them and gain access to your systems. But how can you prevent such attacks by relying solely on a pentest…

    Read more