Technology

Support for SharePoint Server 2016 and SharePoint Server 2019 ends on 14 July 2026. After that date, Microsoft stops providing security updates, non-security updates and assisted support for those versions. Your farm will not switch off on 15 July. Sites may still load. That is exactly why this one is...

The most useful lesson from the Marks & Spencer and Co-op cyber attacks of 2025 is also the least comfortable one: the weakness was not just malware. It was process. Public reporting linked the M&S incident to social engineering against a third-party IT service desk, where attackers persuaded someone to...

If your finance team receives a voicemail from someone who sounds exactly like your chief executive, asking for an urgent payment before a meeting starts, the safe assumption in 2026 is not that the voice is real. AI voice cloning has become cheap, accessible and convincing enough that a familiar...

The single date worth pinning to your wall is 13 October 2026. That is when the consumer Extended Security Updates programme for Windows 10 ends, and it is also when year 1 of commercial ESU coverage finishes for business devices enrolled in the paid programme. After that date, consumer devices...

If your staff are using Microsoft Copilot, ChatGPT or other AI tools for work, you need to know where those tools sit in your IT environment before you complete Cyber Essentials v3.3. The new Danzell question set does not turn Cyber Essentials into an AI governance standard, but it does...

If your business relies on an outside IT provider, the most important thing to understand about the UK Cyber Security and Resilience Bill is this: it brings managed service providers under direct regulation for the first time, and it does so precisely because those providers hold privileged access to your...

Shadow AI is what happens when staff use AI tools your organisation has not approved, usually because the tool is quick, familiar and available in a browser. It might be a free chatbot, a personal AI assistant, an unapproved browser extension or a trial account for a new AI platform....

If your business uses Microsoft 365 and is working towards Cyber Essentials certification, your Microsoft 365 tenant is now firmly within the scope of your assessment. This has been a significant source of confusion for UK businesses, many of whom assumed that because Microsoft runs the underlying infrastructure, their cloud...

Passwords remain one of the weakest points in business security. Despite years of guidance, password managers, complexity rules and multi-factor authentication, the same problems keep appearing: passwords can be stolen, reused, guessed, phished and leaked through third-party breaches. Passkeys and FIDO2 authentication work differently. They do not rely on a...