A major credential leak linked to the US cybersecurity agency CISA has exposed a problem most businesses are far more vulnerable to than they realise. From forgotten API keys to overprivileged supplier access, exposed credentials have become a normal part of modern IT environments. Here’s what UK SMEs and mid-market organisations should actually be paying attention to.

Eight years on from the Cambridge Analytica scandal, the questions it raised about data, privacy and control feel less shocking, and more familiar.

At the time, the idea that millions of users’ data could be harvested and used without clear consent felt like a turning point. Today, we operate in a world where data collection underpins much of the technology we use every day.

In this blog, we look back at what actually changed, and why the bigger lesson for organisations in 2026 is not the scandal itself, but how data now moves through modern systems.

AI is everywhere. In almost every business tool, from productivity software to analytics platforms. But as organisations experiment with these systems, a key question is often overlooked: what happens to your data once it enters an AI model? In this piece, we explore how large language models work, where business data can unintentionally flow, and why governance around AI is becoming increasingly important in 2026.

ChatGPT caricatures are everywhere right now. They’re fun, personalised, and feel low risk. But beneath the surface sits a more uncomfortable reality about data permanence, profiling and workplace exposure. This blog breaks down what’s actually at stake when we feed AI more detail than we realise.