Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why You Can No Longer Trust What You See

Deepfakes and AI driven attacks are making it hard even for experts to tell what is genuine, from casual social videos to targeted messages. Recent cases used convincing voice and chat to pressure staff into password resets, fund transfers and access changes, forcing organisations to rethink how people validate what they see and hear.

Third Party Supplier Security: Are Your Vendors Safe?

Your third party suppliers probably aren’t as secure as you think they are. SecurityScorecard’s 2025 Global Third Party Breach Report found that at least 35.5% of all data breaches in 2024 originated from third party compromises. That’s not a minor risk you can ignore. The numbers tell a stark story. But here’s what most organisations miss: the real figure is likely higher since many breaches aren’t disclosed or are mistakenly reported as internal incidents.

Achieving PCI DSS Compliance: A Guide for UK Businesses

Let’s get right to it: Razorthorn Security helps organisations achieve and maintain PCI DSS compliance through expert consultancy, gap analysis and preparation for formal assessment and has been recognised by Gartner as a market leader in PCI DSS QSA services. If you’re handling payment card data, you’ll need qualified support to navigate the 500+ controls that PCI DSS demands.

Cybercrime's New Goal: It's Not Your Data, It's Your Time

The economic model of cybercrime is shifting from stealing data to creating time drag on the systems that keep the business running. Loud ransomware taught everyone to expect clear incidents, but quieter attacks now focus on prolonged disruption, where boards pay to restore growth and confidence without ever declaring a cyber event.

What A Real Nation State Cyber Attack Looks Like

A realistic nation state style attack is less cinematic blackout and more slow grind, with degraded services, conflicting information and outages that are hard to prioritise. Public confidence erodes as friction spreads and misinformation amplifies the chaos, and history shows societies fail when trust in key systems collapses faster than those systems adapt.

Inside A Government Agency With No Threat Model

A central government department relied on a part time virtual security lead, ageing tools and no central view of security data, with nobody owning real decisions. When asked what type of attacker would target their systems or whether they had a threat led defence, nobody from engineering to leadership had an answer, despite direct access to national guidance.

How Hackers Used Distraction To Rob Gaming Giant Ubisoft

Attackers broke into major gaming platform Ubisoft and started spraying free in-game currency, triggering confusion as teams tried to understand the sudden rush of skins and purchases. While everyone focused on the noisy mess, the intruders quietly stole source code for the full game catalogue, walking away with the real prize.

Why You Cannot Run Business Like A Government

Geopolitics runs on the idea that if one country is not first, another will be, and that logic is now leaking into corporate strategy. Nation states can absorb failure in pursuit of an edge, but most businesses have a low tolerance for failure, so importing that mindset turns ambitious bets into existential risks.

The Dangerous Reason CISOs Get Sidelined

Security leaders are not ignored because governance or risk no longer matter, they are sidelined because speed and efficiency are treated as the only metrics that count. AI is sold as a competitive edge, so any warning about second order effects sounds like friction, even though speed without control creates asymmetric risk that grows out of sight.

Why is cybersecurity getting so expensive?

Cybersecurity is pricing itself out of reach. Over the past eight years, private equity and VC acquisitions have driven massive price increases across security consulting, vendor products, pentesting and compliance services. SMBs are struggling with vendor renewals climbing up to 40% while security budgets can't keep pace. From endpoint security to SIEM solutions, baseline cybersecurity is becoming unaffordable for the organisations that need it most.