Business & Finance
Study Warns on “Head-in-the-Sand” Approach to Cybersecurity
[ad_1]
-
“Cyber Security Report 2024/2025” by Horizon3.ai for the United
Kingdom -
Cybersecurity expert Keith Poyser: “Half of companies neglect
regular assessments of their operational cyber risks, despite it being
essential to protect themselves from potential threats and comply with
modern legislation.”
At least half of UK organisations are neglecting to assess their
operational cyber risks, despite the increasing threats in the
cybersecurity landscape and the requirements of regulations such as DORA
and NIS2, according to Keith Poyser, Vice President for EMEA at
cybersecurity company Horizon3.ai. He cites findings from Horizon3.ai’s
“Cyber Security Report 2024/2025”, which surveyed 150 UK organisations.
The report reveals that only 23% of the companies regularly conduct risk
assessments of their IT infrastructure to determine how vulnerable they
are to cyberattacks.
Industry veteran Keith Poyser raises a key concern: “Regular assessment
of operational cybersecurity is essential to meet both current and
forthcoming legal requirements for IT security. This includes the Cyber
Security and Resilience Bill, set to be introduced to Parliament this
year, alongside European regulations like the Cyber Resilience Act
(CRA), which also impact UK organisations working with EU partners.
Moreover, ongoing evaluations are the only effective way to mitigate the
potentially severe consequences of cyberattacks. Companies that neglect
to assess their cyber resilience are knowingly putting themselves at
considerable risk.”
Cyber Resilience Requires Regular Maintenance
Nearly a third of organisations acknowledge their weaknesses in this
area, according to the survey. While 31% currently do not conduct cyber
risk assessments, they intend to address this gap in the future.
However, 29% perform assessments only once a year, a quickly out-of-date
snapshot, which is insufficient to stay ahead of evolving threats.
The government’s Cyber security breaches survey 2024* estimates
that UK businesses had experienced approximately 7.78 million cyber
crimes of all types within 12 months. “Limiting penetration testing,
getting a true attacker’s perspective, of your computing and cloud
environments to just once a year borders on negligence,” warns Poyser.
He offers a striking analogy: “It’s like taking your car for an MOT once
every hundred years. It might survive the century, but the odds are far
from being in your favour.”
Head-in-the-Sand Policy on Cybersecurity
According to the study, 13% of companies do not test their defences
against cyberattacks at all—leaving them to be “tested” only by an
actual attack. Furthermore, 11% have no plans to change this approach in
the future. The remaining respondents either saw no need for such
measures, were unable to provide an answer, or stated in the survey: “We
are not aware of any cyber risks.”
Cybersecurity leader Poyser criticises “a widespread
head-in-the-sand-approach to cybersecurity” in many organisations. He
explains: “Businesses install common defensive devices like firewalls,
Endpoint Detection and Response (EDR), Cloud Native Application
Protection Programmes (CNAPPs), and similar defensive security tooling,
then simply rely on them to keep all types of attacks away from their
environments. Penetration tests to assess the effectiveness of these
measures are rarely carried out.” This could explain why 23% of the
organisations surveyed admit they have no idea whether they have
suffered a cyberattack in the past two years.
From Defensive to Proactive: The Key to Cybersecurity Success
The survey reveals a concerning imbalance in cybersecurity strategies
and suggests that the lack of preparedness in cybersecurity may stem
from passive and uncertain approaches to security strategies. 34% of
companies reported that they solely rely on defensive measures without
actively testing their resilience, while 21% at least conduct occasional
offensive exercises. Only 7% regularly engage in structured Red and Blue
Team testing, and 15% recognise the need for offensive security but lack
the know-how to implement it. Meanwhile, 18% delegate these crucial
tasks to external consultants. This reactive mindset leaves many
organisations exposed to potential cyber threats.
This reliance on external expertise extends to risk assessments as well.
Among companies that conduct annual or periodic evaluations, 16% handle
them in-house, while 42% bring in external service providers. A pentest
involves a full-scale simulated cyberattack on a company’s IT
infrastructure to test its resilience against real-world threats. As US
cybersecurity expert Bruce Schneier aptly put it, “You can’t defend. You
can’t prevent. The only thing you can do is detect and respond.”
Cybersecurity expert Poyser confirms: “The UK economy relies far too
heavily on the assumption that defense systems will work when needed,
without systematically verifying their effectiveness. We need to shift
from a defensive to a more proactive offensive approach to tackle
cybersecurity crises.”
About Horizon3.ai and NodeZero: Horizon3.ai provides a
cloud-based platform, NodeZero, enabling organisations and public
authorities to simulate self-attacks on their IT infrastructure to
assess their cyber resilience through penetration testing (pentesting).
Thanks to its cloud model, the platform offers affordable, regular
pentesting, making it accessible to mid-sized companies. Horizon3.ai
continuously monitors the cybercrime landscape to ensure that newly
discovered vulnerabilities are swiftly integrated into the cloud system.
NodeZero not only identifies security flaws but also offers tailored
recommendations for remediation. Through this platform, Horizon3.ai
helps organisations meet rising regulatory demands for cyber resilience
in Governance, Risk & Compliance (GRC), with guidelines recommending an
internal self-attack at least once a week.
Trademark notice: NodeZero is a trademark of Horizon3.ai
Further information:
Horizon3.AI Europe GmbH, Sebastian-Kneipp-Str. 41, 60439 Frankfurt am Main, Web: www.horizon3.ai
PR Agency: euromarcom public relations GmbH, Tel. +49 611 973150, Web: www.euromarcom.de, E-Mail: [email protected]
[ad_2]
Source link
Business & Finance
FBI Identifies North Korea as Culprit in $6.3 Billion Binance Crypto Hack
FBI attributes $6.3B Binance crypto hack to North Korea, raising security concerns. Binance covers 90% of losses.
In a striking attribution of cyber malfeasance, the Federal Bureau of Investigation has named North Korea as the perpetrator behind a colossal $6.3 billion hack on Binance, one of the world’s largest cryptocurrency exchanges. This revelation underscores persistent cybersecurity vulnerabilities and intensifies geopolitical tensions already fraught with complexity [The Guardian, November 2026].
The breach, now recognized as the largest of its kind, has sent shockwaves through the digital asset community, raising urgent questions about the robustness of current security protocols within the crypto industry [Al Jazeera, November 2026]. Despite the significant financial blow, Binance has demonstrated resilience by covering a substantial 90% of the losses, reflecting its commitment to maintaining user trust and stability [The Guardian, November 2026].
Binance’s response to the hack has been proactive, involving collaboration with international law enforcement agencies to pursue recovery of the stolen assets. A spokesperson from the exchange affirmed, “We are working closely with law enforcement to recover the funds,” indicating a strategic approach to mitigate the consequences of this unprecedented breach [The Guardian, November 2026].
The scale of the hack, valued at $6.3 billion, places it squarely in the spotlight of global financial and security discussions. It serves as a stark reminder of the vulnerabilities inherent in digital finance systems, particularly as they become more entwined with global economic infrastructures [Al Jazeera, November 2026].
North Korea’s involvement in such a high-profile cybercrime reflects broader geopolitical dynamics, where state-sponsored hacking has become a tool for economic gain and political leverage. This attribution by the FBI further complicates diplomatic relations and underscores the need for coordinated international responses to cyber threats [The Guardian, November 2026].
The incident has not only affected Binance but has also sent ripples across the broader cryptocurrency market, prompting investors and exchanges to reassess their security measures. The hack’s magnitude highlights the urgent need for enhanced protective measures and industry-wide collaboration to fortify digital asset exchanges against future threats [Al Jazeera, November 2026].
In the wake of this cyber assault, Binance’s robust response and coverage of losses may set a precedent for how exchanges handle such adversities in the future. It also emphasizes the critical role of transparency and accountability in maintaining user confidence and market integrity [The Guardian, November 2026].
As the situation unfolds, the interplay between cybersecurity and international politics will likely intensify, with potential repercussions for regulatory frameworks governing digital assets. The hacking incident serves as a catalyst for ongoing debates about the balance between innovation and security in the realm of cryptocurrency [Al Jazeera, November 2026].
Looking forward, the focus will remain on how Binance and other cryptocurrency platforms adapt to these evolving threats. Their ability to enhance security protocols and foster international cooperation will be crucial in defining the future landscape of digital finance. The world will closely monitor these developments, particularly as they relate to North Korea’s cyber capabilities and intentions [The Guardian, November 2026].
Business & Finance
Naboo Expands with Acquisition of UK Events Platform Pro-ven
Naboo has acquired UK M&E spend specialist pro-ven, which becomes Naboo UK, keeping all 20 staff and its founder.
Naboo, the Paris-based meetings and events (M&E) spend management platform, announced on 27 October 2026 that it has acquired pro-ven, a UK specialist in venue sourcing and event procurement, for an undisclosed sum. The companies say the combination creates the world’s largest pure-play provider of M&E spend management and venue sourcing.
Founded in 2005, pro-ven helps corporate and association clients manage meetings and events spending through venue and supplier sourcing, contract negotiation, approval workflows, invoicing and payment management. It generates around €30 million in annual transaction value and brings enterprise clients including Unilever, Virgin Media and Sony. Following the deal, Naboo says the combined business will manage around $300 million (€268 million) of meetings and events spend.
Under the terms of the deal, pro-ven’s Hertfordshire office becomes Naboo’s UK headquarters and the business will operate as Naboo UK. All 20 pro-ven employees are being retained, and founder and managing director Julian Laxon will stay on to help grow Naboo’s UK presence. Existing pro-ven clients keep the same account teams and commercial arrangements, while gaining access to Naboo’s AI-driven technology platform and international network.
Naboo says the acquisition was financed equally through equity and borrowing. It follows the company’s $70 million (€58.7 million) Series B round in February 2026, led by Lightspeed Venture Partners with participation from existing investors Notion Capital, ISAI and Ternel.
The UK is not a new market for Naboo, which has operated there since 2024. CEO and co-founder Maxime Eduardo said the deal is primarily about accelerating growth in what he called a huge market for the company and adding enterprise customers. “Together with pro-ven, that is the leader we are building,” he said.
The acquisition caps a busy period for Naboo, which recently unveiled a new brand identity and opened its first Asia-Pacific office in Singapore, following its expansion into North America with offices in Montreal and New York.
Sources: Business Travel News; EU-Startups; CIT World; The Business Travel Magazine.
Business & Finance
How AI is Transforming Small Businesses: Success Stories
This article explores the transformative impact of AI on small enterprises, highlighting specific case studies of businesses that have successfully integrated AI technologies to enhance efficiency and competitiveness.
In September 2026, the Financial Times reported a significant surge in the adoption of AI technologies by small enterprises, driven by the promise of enhanced efficiency and reduced operational costs. Among the many businesses venturing into this digital frontier, a few stand out as exemplary cases, demonstrating the transformative power of AI when strategically implemented.
Take, for instance, GreenLeaf Grocers, a small organic food retailer based in Brighton. Faced with the challenges of scaling operations and managing inventory efficiently, GreenLeaf turned to AI-driven inventory management systems. By analyzing customer purchasing patterns and forecasting demand, the system enabled the grocer to optimize stock levels, reducing waste by 30% within the first year. The owner, Sarah Jenkins, noted, “AI has not only streamlined our operations but has also allowed us to focus more on customer service and community engagement.” This case underscores the potential of AI to reshape retail operations, offering insights into customer behavior that were previously inaccessible.
Another compelling story is that of TechFixers, a family-run electronics repair shop in Manchester. Confronted with increasing competition and the need to differentiate their services, the owners implemented an AI-powered diagnostic tool. This technology rapidly identifies device issues, providing technicians with precise solutions. As a result, TechFixers reduced average repair times by 40%, significantly boosting customer satisfaction and expanding their clientele. The owner, Mark Thompson, attributes their competitive edge to AI, stating, “Integrating AI into our diagnostic process has been a game-changer, allowing us to offer quicker, more reliable repairs.”
In the realm of financial services, FinServe, a small accounting firm in London, illustrates the impact of AI on service delivery. By employing AI-based analytics tools, FinServe offers clients real-time financial insights and predictive forecasting. This capability has attracted a new segment of tech-savvy clients seeking proactive financial management. The firm’s director, Lucy Patel, emphasized the strategic advantage gained, “AI has empowered us to provide a level of service that was previously the domain of larger firms. We’re now able to deliver insights and strategic advice that truly add value for our clients.”
These cases highlight not only the successful application of AI in various industries but also the diverse ways in which small enterprises can leverage technology to overcome specific challenges. While the potential benefits of AI are substantial, the journey is not without its hurdles. Businesses must navigate the complexities of data integration, system compatibility, and the initial investment costs. However, for those willing to embrace the change, the rewards can be substantial.
As AI technology continues to evolve, its role in small business operations is likely to expand, offering new opportunities for innovation and growth. The experiences of GreenLeaf Grocers, TechFixers, and FinServe serve as a testament to the transformative power of AI, providing a roadmap for other small enterprises eager to harness this technology.
Looking ahead, the integration of AI into small business operations is set to become even more pervasive. As technology advances and becomes more accessible, businesses of all sizes will find new ways to leverage AI for competitive advantage, creating a dynamic and constantly evolving landscape.
-
Business & Finance2 years agoXella achieves significant progress in CO₂ emissions reduction, circular economy, and occupational safety
-
Entertainment & Arts6 months agoDrake’s ‘Iceman’: A Streaming Chart-Busting Success Story
-
Environment & Nature2 years agoSK tes Launches New Circular IT Facility in Shannon, Expanding Ireland’s Role in Global Sustainable Tech Services
-
Science & Technology6 months agoApple’s AI Innovations: Shaping the Competitive Landscape in 2026
-
Business & Finance6 months agoAI Revolutionizes Cryptocurrency Trading with Real-Time Analysis
-
Business & Finance6 months agoEU’s Regulatory Shift: A Boon for Small Tech Firms
-
Environment & Nature6 months agoScotland’s Rewilding Revolution: Ecological Benefits and Global Influence
-
Entertainment & Arts6 months agoThe Cinematic Legacy of Michael Jackson: A Biopic Unveiled
