The EU Digital Omnibus

On 19 November 2025, the European Commission published the Digital Omnibus package, a set of draft legislative proposals intended to simplify, consolidate and align the EU’s digital regulatory framework. The initiative responds to concerns from businesses and regulators about overlapping obligations, fragmented national implementation and increasing compliance complexity across EU digital laws. The Digital Omnibus […]
Security Roundup November 2025

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. OWASP updates top ten risk list OWASP’s 2025 release of its Top Ten Web Application Security Risks is the first update to the list since 2021. The draft adds two major categories: software supply chain failures, expanding the prior “vulnerable and outdated components,” and […]
IRISSCON 2025 puts human side of security front and centre

Victims, targets, defenders, and perpetrators: when it comes to cybersecurity, all human life is there. IRISSCON 2025 was a timely reminder that cybersecurity might be a technical discipline but we can’t forget the critical role that people play. Now in its 16th year, the conference has consistently advocated for the good guys, and to do […]
ISACA Europe Conference 2025: A Roundup

From 15th October to 17th October, I had the privilege of being part of the ISACA Europe Conference 2025 an event that brought together some of the most insightful voices in technology, privacy, and governance. For me, it was not just about attending sessions; it was about sharing the stage. As a first-time speaker representing […]
Security Roundup October 2025

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Presenting the new-look BH Consulting We are proud to unveil the new BH Consulting brand and website. It represents the company’s next step as leaders in cybersecurity and data protection consulting, while staying true to what matters most: the trusted […]
Security Roundup September 2025

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Ground control to major chaos Another day, another reminder why supply chain security has been rising in prominence recently: a ransomware attack on a company that provides self-service check-in kiosks caused disruption at multiple European airports beginning on Friday 19 September and […]
Security Roundup August 2025

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Fraudsters trade on fake lawyers’ names Scammers are impersonating legitimate trade mark agents as part of a sophisticated fraud, using names of genuine attorneys from a public register. The Irish Independent reported that criminals emailed several Irish businesses recently, suggesting […]
Security Roundup July 2025

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Virtual shock, real-world consequences Long warned about, and now tragically come true: a fatality has been directly linked to a cybersecurity incident. The UK NHS determined that a ransomware infection at Synnovis, a pathology service provider, contributed to a patient’s […]
Security Roundup June 2025

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. All-Ireland cybersecurity sector has scope for growth Ireland’s cybersecurity sector is worth €3.2 billion and is now one of the largest in Western Europe, according to a new report. Cyber Ireland’s 2025 All-Island Cyber Security Sector Report shows the industry […]
Security Roundup May 2025

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. There’s breach response … and there’s M&S breach response Breach response is in the spotlight, with two recent cases showing the best and worst examples of the genre. After reporting a “cyber incident” on 25 April, the UK retailer Marks […]