UK government launches national campaign urging SMEs to “lock the door” A new government backed cyber campaign is specifically targeting small and medium sized businesses, highlighting that around half of UK SMEs experienced a cyber incident in the past year. The message is simple: basic protections like Cyber Essentials dramatically reduce risk and insurance claims. Why it matters: Attackers are not targeting size, they’re targeting easy entry points.

Cyber attack disruption at London council still causing real-world financial impact. The Royal Borough of Kensington and Chelsea continues to deal with fallout from a serious cyberattack that froze planning systems, council tax processing, and housing benefit payments. Property transactions stalled and residents faced delayed payments for months. Why it matters: This wasn’t just an IT issue it disrupted housing, cash flow, and property development.

UK cyber agency warns critical services and SMEs face escalating threats. The National Cyber Security Centre (NCSC) has issued fresh warnings that cyber threats against infrastructure and businesses are increasing, urging organisations to strengthen identity controls, planning, and resilience measures now not after an incident. Why it matters: This isn’t theoretical UK incidents are rising in both volume and business impact.

Ministers warn no business is “too small” to be targeted. Cyber Security Breaches Survey figures show roughly half of small UK businesses have experienced cyber incidents, with serious breaches costing an average of £195,000, enough to severely damage or close many smaller firms. Why it matters: Cyber risk is now a financial risk, operational risk, and reputational risk all rolled into one.

Boardroom Takeaway

Cyber security is no longer just an IT responsibility it’s a core business resilience issue.

The organisations recovering fastest from incidents aren’t necessarily the ones spending the most. They’re the ones with basic protections, backups, and a clear plan.

Cyber incidents today behave more like fires than technical faults. They disrupt operations, cash flow, customer confidence, and growth.

Preparation is now a commercial advantage.

What to do next week (practical SME checklist)

You don’t need a huge budget, just consistency.

• Enable Multi-Factor Authentication on email, Microsoft 365, and remote access
• Ensure backups are running automatically and tested regularly
• Install pending security updates on PCs, servers, and firewalls
• Review who has admin access, fewer is safer
• Deliver a short phishing awareness reminder to staff
• Consider Cyber Essentials certification as a recognised baseline

Small steps dramatically reduce your exposure.

Bottom line from Cloud9 Computing

Most cyber incidents we see don’t start with sophisticated hacking. They start with simple gaps, outdated systems, weak passwords, or missing safeguards.

The businesses that stay secure aren’t lucky, they’re prepared.

Cyber resilience isn’t about fear. It’s about protecting your ability to operate, serve customers, and grow without disruption.

Paul McCherry, PhD, Cloud9 Computing

#CyberSecurity #UKBusiness #CyberEssentials #BusinessResilience #SMESecurity #CyberAwareness #Cloud9Computing #NorthWestBusiness #DigitalSecurity

A word of warning for business owners and managers

I’ve now had two separate incidents this year where a communications provider (most recently BT) has replaced a company’s internet connection without giving any heads-up to the IT support team.

Each time, the provider reassured the client that it was “a simple change” and that there was “no need to involve IT.”

Each time, that decision caused significant disruption.

In one recent case, the incoming fibre broadband cable had been plugged directly into the LAN instead of through the WAN connection on the firewall. Having little knowledge of the customers infrastructure, to get to the bottom of it, I had to:

🔹 Map all the cabling to understand the physical layout as there was no documentation.
🔹 Log into the firewall and network switches to trace VLAN configurations
🔹 Identify that the incoming fibre was mis-patched into the internal network

It’s a simple error but one that left the business offline and could have been avoided entirely if IT support had been informed.

Even more concerning, I’ve seen configurations left in legacy ADSL mode or external IP addresses changed without warning both of which can break remote access, VPNs, and critical services.

Takeaway: Always insist that your IT provider is notified before any broadband, fibre, or router replacement takes place. What may look like a plug-and-play upgrade to the communications company can easily take your business offline.

#ITSupport #NetworkSecurity #BusinessContinuity #Cloud9Computing #BT#Broadband #Fibre #Networking #CyberResilience

Another win — this time for a group of Essex-based companies hit by LockBit 4.0 ransomware.

Their shared accounting systems were completely encrypted, affecting multiple entities and grinding operations to a halt. We stepped in fast.

Using forensic recovery methods and deep analysis, we successfully recovered the accounting data for every company in the group. No ransom paid. Full restoration.

Another reminder: with the right expertise, recovery is possible.

#CyberSecurity #LockBit4 #RansomwareRecovery #IncidentResponse #NoRansom #EssexBusiness #DataRecovery #BusinessContinuity #DigitalForensics

A Cybersecurity Horror Story In Three Acts

👻 Act 1: The Phishing That Got Personal
That email from the “CEO” asking for urgent wire transfers? Yeah, turns out CEOs don’t email at 2 AM with “Sent from my iPhone” misspelled.

🤖 Act 2: AI-Powered Scams
Deepfake voices now sound eerily real—your boss might not actually be asking you to “buy 500 Apple gift cards immediately.” (Pro tip: Call them back before you max out your credit card.)

🔓 Act 3: The Eternal Password Problem
People are still using “123456” and “password” in 2025. Meanwhile, cybercriminals are using AI-powered brute force attacks. This is why we can’t have nice things.

💡 Moral of the Story?
Always verify unusual requests—especially financial ones.
AI scams are getting smarter—so should you.
Use a password manager, MFA, and a little common sense.

What’s the wildest cybersecurity threat you’ve seen recently? We’d love to hear from you, email enquiries@icloud9.co.uk ⬇️

hashtag#CyberSecurity
hashtag#Infosec
hashtag#StaySafeOnline