A phishing email reportedly opened the door to thousands of Manchester City documents, and almost a decade later, the consequences are still unfolding. Here’s what UK businesses should learn about email security, access, monitoring and incident response.

Revolut was not breached through its core systems. Criminals used a legitimate government email domain to request sensitive customer data. The incident is a useful warning for every business that relies on email and trusted relationships.

MFA has been the sensible answer to a clear problem: passwords aren’t enough. But attackers have adapted, and now one-time codes can be intercepted, fake sign-in pages can relay credentials in real time, and push notifications can be abused.

Passkeys offer a more phishing-resistant alternative, without making security more frustrating for users. So, what are they, how do they work, and what should UK businesses do now?

April Fools’ Day is built on harmless deception, but phishing attacks are anything but. While prank emails might raise a smile, malicious ones are designed to catch you off guard and exploit trust, urgency or familiarity.

In this blog, we break down five common phishing tactics still catching people out in 2026, and what to look for before you click.

Email remains one of the most trusted channels in business, yet it is also one of the easiest to abuse. If your domain is not properly protected, it can be spoofed without your knowledge, putting your brand and clients at risk. In this piece, we break down what DMARC actually does, why so many organisations still misconfigure it, and why domain protection should be treated as a baseline control in 2026.

If someone sent an email pretending to be your CEO, would your systems catch it? Would your clients know the difference? Could you stop it? Email spoofing is one of the easiest ways for cybercriminals to impersonate your brand, trick your clients, and cause chaos in your business.

And it works. All too well.

Join us for a look at all things DMARC and learn how it can keep you (and your inbox) safe from malicious outsiders.

What is phishing, how can you spot a suspicious email and what should you do if you click the wrong link? We break down the warning signs, common tactics and practical steps businesses and employees can take to reduce the risk.