Did you know that anyone can send an email that looks like it came from your company? The "from" address on an email is not checked by default. It is simply text, typed by whoever sent the message, and it can be made to say anything at all. That is why so many fake invoices, fraudulent payment requests and convincing phishing emails appear to come from a real supplier, a real colleague, or your own finance team. Domain hardening is the work of closing that gap. Three linked s

A practical guide for small and medium businesses. Why it matters, what catches people out, what audit day looks like and how to get it done. This guide has now moved to here: Arlio Cyber Essentials Guide

This is a question I have been asked a few times over the past few weeks, and I admit that on at least one occasion, I struggled to provide a good answer. So, let me fix this right now... If you are on the right platform and the right tier of license, the risk of your data being shared across the model is relatively low. However, the real risk you need to consider is if your business has taken the right steps to prepare and manage usage. I have provided below a breakdown on w

The threat from AI keeps increasing… In April, Anthropic withheld Claude Mythos Preview, citing cyber-offensive capabilities too dangerous to ship. Last week, the UK AI Security Institute (AISI) published its independent evaluation of OpenAI's GPT-5.5. The verdict? It's in the same league, and it's available now 😧 Our evaluation of OpenAI's GPT-5.5 cyber capabilities | AISI Work I’m not going to rehash AISI's findings (see link above) or weigh in on whether the risk is over

We've published a guide - Keeping your iPhone safe from thieves. Here is a quick back story on why we created this and now sharing with everyone. About two years ago a friend had his iPhone snatched in London. The detail that mattered most, it was unlocked when they took it. Within two days the thieves were inside his email, his Apple ID, his entire WhatsApp history, and took thousands from his bank account. Face ID on the apps didn't help. The bank's passcode didn't help. On