A robust incident response plan against data breaches should include identification, protection, detection, response and recovery. Companies need to understand their roles in response to breaches and the legal implications. Prevention strategies include regular risk assessments and staff training, sophisticated security platforms, and regularly updating security measures. Effective communication during a breach, swift containment and a comprehensive post-breach evaluation can minimise damage and future risk.

New Bluekit Phishing-as-a-Service Bypasses MFA to Steal Microsoft Login Credentials
A sophisticated Phishing-as-a-Service (PhaaS) platform called Bluekit has been confirmed operational at scale, with cybersecurity firm Netcraft detecting approximately 70 live hostnames in a single


