Since 29 April 2024 smart devices sold in the UK must ship without default passwords and state how long they get security updates. What the law covers, what the ICO says about doorbell cameras, and the settings to change today.
The NCSC wants UK organisations to finish moving to post-quantum cryptography by 2035. For a small firm on standard IT, vendors do most of that work. Here is what is already fixed, what is not, and the short list worth doing now.
What a passkey is, why a fake login page cannot steal one, synced versus device-bound, where they live, the admin switches in Microsoft Entra ID and Google Workspace, and a step-by-step for a small business and a household.
Nearly half of UK businesses now have some cyber cover, but only one in ten has a standalone policy. What insurers actually ask on the proposal form, the exclusions that catch people out, and how a 25-person firm should prepare.
The government's 2026 breaches survey found 43% of UK businesses were attacked in the past year, with phishing behind most of the damage. Here is what actually works against it, in order of effort.
The "Danzell" question set took effect on 26 April 2026. Two new automatic-fail questions and mandatory MFA on every cloud service catch out businesses that passed comfortably last year. A plain-English guide to the changes.
· 4 min read
Prefer a person to a page?
Everything written here comes from the same engineers who answer the phone. If your question isn't covered yet, just ask.