Cyber risk, explained
Breach analysis while it still matters, and plain-English guides to what our scans actually do. Written by the CyberLab security team. For interviews and podcast episodes, see Tales from The CyberLab.
October 2026 in cyber security
Two breaches, and a flaw under attack, and what each one means for your business
Hacked, but the shops stayed open
The owner of Hobbs, Whistles and Phase Eight was hit by a cyber attack on 11 October, but its shops kept trading. Here's what UK small firms can learn from how it limited the damage.
What the NCSC's frontier AI guidance means for your businesses
The NCSC says AI is making attacks faster and cheaper. Here is what that changes for your business, and what to do about it.
Hackers turned supermarket fridges into ovens
Hackers reached refrigeration controls in hundreds of French supermarkets and set them to defrost at up to 50°C. Here's what UK small firms with connected kit should check this week.
What happens when cyber insurance kicks in
What happens when a cyber attack hits and you call your insurer? Lessons from Beazley and Capsule on the first 72 hours, ransom negotiation and claims
ASOS confirms customer contact details were exposed
ASOS has confirmed that some customers’ names and contact details were exposed after the ‘ASOS HACKED’ alert. Here’s what changed and what to check.
£101m lost to fake 'new bank details' requests
UK victims reported losing more than £101m to payment diversion fraud in 2025/26, with invoice fraud the most common type. Here's how the scam works and five checks to stop it.
ASOS customers receive a hacker's threat via the app
ASOS app users received an "ASOS HACKED" alert on 6 October. Here's what we know so far and what to check in your own business.
How to read your HackRisk report: a walkthrough
Your HackRisk Report is a snapshot of where you stand, delivered free of charge and within 24 hours.
Over half of UK firms lack basic cyber skills
57% of UK businesses aren't confident with at least one basic cyber task, a new government survey finds. Here's what the gaps are and how to cover them without hiring an expert.
Your staff are already using shadow AI
71% of UK employees have used unapproved AI tools at work. The NCSC says shadow AI puts company data at risk. Here's what small businesses can do this week, without banning AI.
WordPress flaw exploited within hours
A critical WordPress flaw (CVE-2026-87902) was attacked within hours of its 22 Sept fix. What it means for UK small businesses and what to check this week.
Your IT provider is about to be regulated
The Cyber Security and Resilience Bill brings medium and large IT providers under cyber rules, with 24-hour incident reporting and big fines. Here is what it means for UK small businesses.
Half of UK SMEs were breached last year
49% of UK SMEs had a cyber incident last year and recovery took over four weeks. Here's what caused them and the checks that would have stopped most of them.
AI hackers now cost $25 a target
Autonomous AI agents breached 27+ online retailers in weeks at around $25 a target. Here's what it means for UK small businesses and what to do this week.
Breached: what actually happens when cyber insurance kicks in
Join us on Wednesday 7 October when we'll be joined live by specialists from Capsule Insurance and Beazley to talk cyber insurance, and the discounts available to HackRisk customers.
Cyber risk in technology companies
September 2026 in Cybersecurity
Three breaches, three different ways in, and what each one means for your business
Revolut data breach explained
Revolut has confirmed that customer data was handed over to scammers after staff were targeted by a phishing email impersonating a government agency.
Recon Scan explained
Before an attacker ever tries to get into your systems, most of them look first.
Security Awareness Training explained
Most businesses already run some kind of security training. An annual video. A policy document everyone signs and nobody reads again.
Dark Web Scan Explained
Most business owners assume a data breach is something that happens to other companies - bigger companies, with bigger targets on their backs.
Supply Chain Risk explained
You can do everything right - patch your systems, train your staff, lock down your network - and still be exposed, because a breach doesn't have to start with you to affect you.
Phishing Simulations explained
Most businesses have told their staff, at some point, not to click suspicious links.
Vulnerability Scan explained
Every piece of software your business runs -- your website, your email system, the apps that keep everything ticking over -- occasionally has flaws in it.