MFA has been the sensible answer to a clear problem: passwords aren’t enough. But attackers have adapted, and now one-time codes can be intercepted, fake sign-in pages can relay credentials in real time, and push notifications can be abused.

Passkeys offer a more phishing-resistant alternative, without making security more frustrating for users. So, what are they, how do they work, and what should UK businesses do now?

April Fools’ Day is built on harmless deception, but phishing attacks are anything but. While prank emails might raise a smile, malicious ones are designed to catch you off guard and exploit trust, urgency or familiarity.

In this blog, we break down five common phishing tactics still catching people out in 2026, and what to look for before you click.

Email remains one of the most trusted channels in business, yet it is also one of the easiest to abuse. If your domain is not properly protected, it can be spoofed without your knowledge, putting your brand and clients at risk. In this piece, we break down what DMARC actually does, why so many organisations still misconfigure it, and why domain protection should be treated as a baseline control in 2026.

If someone sent an email pretending to be your CEO, would your systems catch it? Would your clients know the difference? Could you stop it? Email spoofing is one of the easiest ways for cybercriminals to impersonate your brand, trick your clients, and cause chaos in your business.

And it works. All too well.

Join us for a look at all things DMARC and learn how it can keep you (and your inbox) safe from malicious outsiders.

Phishing attacks are on the rise, with stories such as the Ukraine conflict being a lure for malicious outsiders, but what is a phishing attack, and what should you look out for? We explore more.