Attackers used trusted ConnectWise Cloud Backup application identities to access Microsoft 365 tenants without requiring a customer password or an MFA prompt. UK organisations should now check active and dormant connections, service principal activity, and their current backup gap.

A phishing email reportedly opened the door to thousands of Manchester City documents, and almost a decade later, the consequences are still unfolding. Here’s what UK businesses should learn about email security, access, monitoring and incident response.

Apple’s latest security update fixes CVE-2026-86950, a vulnerability that may have been used in a highly targeted attack. Here’s what UK SMEs should update now, which devices need attention, and why mobile patch management needs more than a reminder email.

Nobody approved £30,000 of wasted software spend. It accumulated one licence, forgotten trial and overlapping tool at a time. Here’s how UK SMEs and mid-market organisations can bring SaaS subscriptions, usage and renewals back under control.

AI tools can only work with the access and data environment you give them. Before rollout, review permissions, sharing links and ownership so old access problems do not become fast, searchable ones.

Your IT manager knows the business better than an external provider ever could, and co-managed IT gives them the capacity, specialist support and reliable cover to do more with that knowledge, without handing over control.

A managed service provider can act as your IT department or strengthen the team you already have. This practical guide explains how MSPs work, the benefits for UK businesses, what to look for in a provider, and why clear responsibilities matter in a co-managed relationship.

A new starter waiting for a laptop or access isn’t just the sign of an awkward first morning, but rather a sign that HR, managers and IT are not quite joined up. Here’s what good IT onboarding looks like, why it matters, and how growing businesses can make it repeatable.

Cyber resilience is moving from “something IT handles” to a board-level business discipline. The government’s July 2026 Cyber Resilience Pledge is aimed at larger organisations, but the practical message applies neatly to UK SMEs: know who owns cyber risk, use the free tools available, and make supply-chain security less vague.