AI-assisted vulnerability discovery is accelerating the rate at which security flaws are found and reported. For researchers and vendors, this is progress. For small businesses already struggling with patch management, it means more advisories, more prioritisation pressure, and more noise. Noel Bradford warns that faster discovery will expose weak processes, not fix them. Without a proper asset inventory, clear ownership, agreed maintenance windows, and documented exceptions, businesses risk drowning in patch queues they cannot manage. This episode cuts through the hype to explain why AI-driven vulnerability intelligence demands better fundamentals, not heroic firefighting. UK businesses can start with Cyber Essentials as a baseline for supported software and security updates. US organisations can map similar thinking through CISA’s Secure by Demand guidance. The message is consistent: faster threat intelligence only helps if your business can make faster, informed decisions. Speed without process is just louder failure.

Cyber crime has become a mainstream business risk, yet many UK SMBs still treat it as an IT problem to be quietly managed between printer issues and password resets. In this Hot Take, Noel Bradford argues that scams, fraud, ransomware, and account compromise belong on the risk register alongside cashflow, supplier risk, and customer retention. Drawing on recent British Chambers of Commerce data showing that 21% of firms experienced cyber attacks and 20% reported fraud or scams in the past year, Noel challenges the notion that security is an optional grudge purchase. He makes the case that cyber incidents ultimately land in the business, not just the server cupboard, affecting finance, operations, sales, HR, legal, and leadership. The episode reframes security spending as growth protection and resilience, not compliance theatre, and offers practical questions business owners should ask before an incident forces them to learn the hard way. For UK SMBs and US listeners alike, the message is clear: if cyber only lives in your IT budget, leadership has already failed the first test.

Most small businesses have backups. Few have tested recovery plans. In this uncompromising episode, Noel Bradford dismantles the dangerous assumption that backup equals recovery readiness. Drawing on NCSC and ICO guidance, he explains why green dashboard ticks, successful job reports, and monthly invoices create false confidence. Businesses fail not from encryption alone, but from downtime, confusion, missing credentials, and broken assumptions. Noel walks through the uncomfortable questions every UK small business must answer: what can you actually restore, by when, from where, and who knows how? He covers the cloud backup gap, the difference between platform availability and data recovery, and why testing turns backup from belief system into evidence. This is not about technology. It is about knowing what happens at 9am on a Monday when your main systems go down. Stop worshipping green ticks. Start proving you can get back to work.

Shadow AI has already arrived in most UK small businesses, often through browser tabs, SaaS tool sidebars, and helpful buttons that promise to improve text. Staff are using AI to rewrite emails, summarise meetings, polish proposals, and speed up admin tasks, frequently without approval, policy, or controls. This is shadow IT all over again, but faster and with better branding. The problem is not the technology itself, but unmanaged data movement into systems nobody has reviewed. Noel Bradford explains why banning AI without offering safe approved routes will fail, why hope is not an AI governance model, and why businesses need practical data controls that give staff clear lanes: low-risk generic tasks, controlled handling of customer data, and hard stops for sensitive material. UK Government guidance and NCSC advice make clear that AI changes the threat landscape, but the basics still matter. This episode cuts through the hype to deliver straightforward guidance on approved tools, supplier checks, human review, and early mistake reporting. AI policy is not about stopping progress; it is about stopping progress from leaking your business into someone else’s platform.

Noel Bradford argues that curiosity is one of the cheapest and most overlooked security controls in small business cyber defence. Many organisations inadvertently train staff to suppress suspicion in favour of speed, creating environments where invoice fraud, phishing, and social engineering thrive. Drawing on NCSC guidance for UK businesses and parallel FTC and CISA frameworks for US audiences, Noel examines why reporting culture matters, how business pressure undermines vigilance, and what practical steps leaders can take to make curiosity socially safe. The episode reframes people not as the weakest link, but as a critical defensive layer when properly supported. Noel challenges businesses to praise false alarms, enforce verification processes for senior staff, and create frictionless reporting routes. This is not soft advice. It is operational security for organisations that cannot afford to reward silence.

Noel Bradford challenges the persistent misconception that CCTV sits outside the cyber security estate. Many small businesses still treat cameras, recorders, door access systems and similar connected devices as facilities kit rather than networked computer systems requiring proper ownership, patching, segmentation and access controls. Modern CCTV often ships with audio capability, adding privacy and governance questions that many organisations have never considered. This Hot Take walks through the practical steps UK small businesses should take to inventory connected devices, control remote access, segment networks, disable unnecessary features like audio recording, and assign clear ownership. The episode references UK guidance from NCSC, ICO and DSIT, with parallel observations for US listeners drawing on CISA and FCC frameworks. If a device has an IP address or a microphone, it counts. Bolted to a wall doesn’t mean exempt from reality.

Noel Bradford unpacks a vendor meeting that went sideways and exposes a wider problem in the small business cyber market. As the UK’s cyber security sector grows to 2,603 firms generating £14.7 billion in annual revenue, more suppliers are packaging cyber protection like broadband bundles: one monthly fee, one portal, one reassuring product name. But when light services hide behind heavy language, small businesses get packages instead of protection. Drawing on the UK Government’s Cyber Security Sectoral Analysis 2026 and real-world incident management experience, Noel explains the difference between genuine incident response and signposting with a login. He challenges the gap between what vendors promise and what customers actually receive when something goes wrong. This episode asks awkward questions about dark web monitoring, phishing simulation, insurance wrappers, and who really owns the incident when the clock is ticking. If you are a small business owner evaluating a cyber bundle, or a vendor selling one, this is essential listening. Cyber security is not a utility. It is not broadband. And when we sell it like broadband, we make ‘do nothing’ the stronger competitor.

Microsoft Authenticator has become the identity gatekeeper for millions of Microsoft 365 users, but CVE-2025-41615 exposes a critical flaw that can leak work account access tokens after user interaction. Noel Bradford unpacks why this ‘information disclosure’ vulnerability is really an identity compromise risk, why the CVSS score debate misses the point, and why treating MFA apps as sacred cows instead of managed software creates dangerous blind spots. This episode challenges IT providers to move beyond tick-box security, explains what access tokens actually do, and delivers a practical seven-step response plan for UK small businesses and MSPs. If your defence relies on assuming automatic updates will save you, you’re not managing risk—you’re outsourcing it to hope. MFA is essential, but the app protecting it needs governance, patching, and accountability.

Europol’s IOCTA 2026 report, published on 28 April 2025, describes cybercrime not as isolated attacks but as a connected industrial economy. More than 120 active ransomware brands operated in 2025, with affiliate programmes offering margins of 80 to 85 per cent. Modern extortion has shifted from encryption to data leak threats, making backups necessary but insufficient. Industrial-scale SIM farms, such as the Latvian operation involving seven nationals, 1,200 devices, 40,000 SIM cards, and more than 49 million fraudulent accounts, now underpin the majority of online fraud. The report highlights enablers including residential proxies, bulletproof hosting, and crypto payment rails. Europol identifies a velocity gap: criminals move faster than law enforcement can respond. For UK small businesses, this matters because too much of the security industry still sells compliance theatre rather than defence against an industrial threat. This episode examines what the report actually says, what ransomware now looks like, why SMS authentication is dangerously weak, and three practical actions any small business can take this week.

In late April 2026, headlines screamed about 86,000 private screenshots leaked from a prominent European celebrity’s phone. The story dominated tech press coverage, but crucial context went missing. This was not hackers breaking encryption or sophisticated cyber warfare. It was endpoint compromise: stalkerware capturing screenshots directly from a device after messages had already been decrypted on screen. The database, allegedly linked to the collapsed Cocospy spyware ecosystem, contained WhatsApp chats, Instagram activity, invoices, intimate images and more. Whilst the core reporting appears sound, the framing obscured important truths. A VPN would not have stopped this attack. Encrypted messaging apps could not protect against malware already installed locally. And beneath the sensational headlines lies a grim pattern: commercial spyware marketed as parental monitoring or employee oversight, repeatedly exposed in breaches that reveal its real use in coercive control and domestic abuse. This episode unpacks what actually happened, why the technical details matter, and why we need to stop calling this surveillance software anything other than what it is.