Behaviour-led cyber security: practical, human, and grounded in how people actually work.
June 2026
FortiBleed leaked logins for nearly 74,000 Fortinet firewalls. The hardware worked. A very human habit did not. The behavioural reason, and the four habits that fix it.
May 2026
NIS2 Gap Analysis FINAL v7, skimmed on a Friday afternoon and never opened again. Why compliance programmes become libraries, and how to make them work.
April 2026
The bad grammar and vague greeting are gone. Phishing now sounds polished, relevant and familiar. Where the red flags moved, and what to look for instead.
March 2026
We are too small to be interesting, and we will be fine. That assumption is exactly what makes smaller businesses attractive to attackers.
February 2026
Every February the internet gets warmer, more flattering and more dangerous. How romance scams work, and the link that arrives once trust is built.
January 2026
Budgets grow, tools multiply, and serious incidents keep happening. Not because the technology failed, but because someone did something understandable.
November 2025
A box of donuts by the coffee machine does more for security culture than another mandatory training email. Reciprocity, and why giving first works.
October 2025
You have 143 accounts, so you tweak the same password again. Why reuse persists despite decades of campaigns, and what actually breaks the habit.
September 2025
Mask-wearing worked partly because it was seen. What badges and visible behaviour reveal about security culture, and why being seen to comply matters.
August 2025
Three calls deep, no lunch, and your CFO wants a quick video call. Familiar voice, familiar face. Why deepfakes fool smart brains, and what to do.
July 2025
Distracted, packing, half checked out. Holiday season is when a fake booking alert works best. Why our guard drops, and the habits that hold up.
June 2025
Criminals rarely out-code your firewall. They out-think your people. What cyber criminals understand about influence, from a keynote in Spain.
