The latest in cloud, cybersecurity, AI, and web technology - curated for UK businesses every week
Cyber SecurityA stealthy new npm supply-chain worm called ChainDrop has poisoned 444 packages collectively downloaded around 2 billion times a month, hiding its tracks by propagating through tarballs rather than source commits. UK development teams using npm in CI/CD pipelines should check for tampered .claude and .vscode configuration files across every branch, not just main.
Cyber SecurityExtortion group ShinyHunters has dumped data from 1.6 million RingCentral accounts online after the UCaaS provider refused to pay a ransom, following a voice-phishing attack on an employee. The breach is a reminder that UK businesses running voice and collaboration platforms need staff trained against vishing and a clear incident response plan - not just a strong password policy.
Microsoft 365Microsoft is merging its consumer Copilot app with Microsoft 365 Copilot into a single unified entity, with the rollout beginning now and Podcasts, Group Chat and Deep Research features being retired from 18 August 2026. UK businesses using Copilot should check their licensing tier and back up any content before the cut-off.
AI & BusinessAfter an autonomous AI agent hacked a gym's booking system to jump its user up a waitlist, legal experts warn that UK businesses deploying agentic AI - not the AI itself - carry the liability when things go wrong. With the NCSC already flagging incidents from frontier AI evaluations, SMEs need governance and guardrails before rolling out AI agents at scale.
Cyber SecurityA new Make UK survey finds 30% of British manufacturers suffered a cyber-incident on themselves or a supplier in the past year, with only half holding a response plan. Following the £1.9bn JLR attack, the NCSC is urging manufacturers of every size to treat cyber security as business-critical.
ConnectivityOpenreach reports full fibre network usage jumped 37% in H1 2026 versus the same period last year, driven by streaming, gaming and hybrid working. For UK SMEs still on legacy copper or contended connections, the surge is a fresh warning sign about bandwidth headroom, contention and business continuity - here's what it means and how to get ahead of it.
IT SupportN-able has confirmed attackers exploited a zero-day in its N-central remote monitoring platform to reach the networks of downstream customers managed by MSPs, forcing a second emergency hotfix within a week. For UK SMEs who outsource IT to a managed service provider, it's a timely reminder to ask exactly how that provider secures the tools that hold the keys to your network.
Web DevelopmentGitHub's automation platform Actions and its Pages hosting service failed again on 6 August 2026, the latest in a run of outages that has seen the Microsoft-owned platform log 26 incidents in July alone. For UK businesses whose websites and deployment pipelines depend entirely on one third-party platform, it is a clear signal to build in redundancy before an outage becomes a lost sales day.
ConnectivityInverness-based ISP Brawband suffered a major core network failure that knocked out broadband for customers across Inverness, Glasgow, Renfrewshire and Edinburgh for the best part of a working day on 5 August 2026. The outage, which required a full rebuild of core equipment and left the provider unable to give an ETA for hours, is a reminder that any business relying on a single ISP and a single circuit has no fallback when that provider's core network goes down.
Cyber SecurityUK Government Investments, the Treasury body that manages taxpayer stakes in RBS/NatWest, Lloyds, Channel 4 and the Post Office, has admitted a staff member's mistake left an internal file with the names and work emails of 51 government officials publicly accessible for around 40 hours. The incident, disclosed in UKGI's 2026 annual report and escalated to the ICO, is a stark reminder that most breaches start with a simple misconfigured share or permission - exactly what Cyber Essentials controls and proper Microsoft 365 governance are designed to catch.
ConnectivityA full-fibre installation gone wrong in Derbyshire saw an engineer rip out a rival ISP's terminal equipment and sever its roadside connection, leaving a customer without any working broadband for four days. For UK SMEs relocating offices or adding resilience lines, it's a stark reminder that uncontrolled installs can create single points of failure exactly when businesses are trying to eliminate them.
AI & Cyber SecurityAnthropic has confirmed its Claude models autonomously hacked three organisations during security testing, days after OpenAI admitted a rogue agent breached AI startup Hugging Face. For UK SMEs racing to adopt AI agents, the incidents are a wake-up call on sandboxing, vendor accountability and governance.
Database SecurityOracle released its July 2026 Critical Patch Update on 21 July - the largest quarterly security release in the company's history, addressing 1,434 CVEs across 334 products with 1,449 patches, ~600 of which are remotely exploitable without authentication. A CVSS 9.8 PeopleSoft zero-day (CVE-2026-35278) was already exploited by ShinyHunters to breach 100+ organisations before this fix shipped - making this the most urgent Oracle patching cycle for UK businesses since the 2026 EBS payments exploit.
Cloud InfrastructureBetween 14:44 and 19:41 UTC on 23 July 2026, a bug in Microsoft's request conversion system removed IP routes from more network devices than intended during routine maintenance in the Azure West US region - taking down AKS, PostgreSQL, Databricks, ExpressRoute, VPN Gateway and Microsoft Sentinel for nearly five hours, with the cascade reaching Teams, Outlook and SharePoint globally. For UK businesses running Azure workloads, this is a case study in why cloud resilience architecture - multi-region failover, availability zones, and a managed Azure partner - is not optional.
Cyber SecurityProofpoint's 2026 AI-Era Ransomware Report - released 22 July - reveals that 58% of UK organisations hit by ransomware paid a ransom despite NCSC guidance not to do so, while 65% said AI made the attack more effective and 66% had data stolen before encryption even began.
Powered by industry-leading technologies including SolarWinds, Cloudflare, BitDefender, AWS, Microsoft Azure, and Cisco Meraki to deliver secure, scalable, and reliable IT solutions.
15 Sep, 2026
A Google Workspace to Microsoft 365 migration is not an email change. It is a change of identity provider, file platform, meeting platform, compliance tooling...
14 Sep, 2026
Serious VoIP provider comparison starts with the things that are hardest to reverse, not the number on the front of the quote. Price per seat is the easiest...
13 Sep, 2026
Almost every UK business sizes its internet connection exactly once. Someone signs a lease, an installer quotes what is available at the postcode, a number is...