AI-powered phishing: Why is traditional security awareness training no longer enough? Traditional phishing training is no longer sufficient because cyber criminals now use artificial intelligence to create highly convincing emails, voice messages and fake conversations that closely mimic trusted individuals. These attacks are more personalised, grammatically accurate and harder to detect than conventional phishing attempts.

Agentic AI can independently perform tasks, make decisions and interact with business systems with minimal human intervention. While this improves efficiency, it also introduces new security risks, including unauthorised actions, excessive system access, data leakage and manipulation by malicious actors. UK businesses should implement strong governance, access controls, human oversight and regular security assessments before

Deepfake fraud is becoming a serious business risk. What should UK finance and HR teams do? Finance and HR teams should treat every high-risk request with caution, even if it appears to come from a trusted executive. Deepfake fraud can manipulate voices, videos and emails to authorise payments or access sensitive information. Businesses should verify

June 2026 brought several important cyber security developments across the UK, including a confirmed UK data breach, regulatory updates, and new privacy legislation affecting organisations. This Monthly UK Data Breach Roundup highlights verified events that every business should understand to strengthen its security posture and reduce future risk. While June recorded fewer publicly disclosed breaches