--- title: blog (2) description: Discover insights on cybersecurity trends, vulnerabilities, and innovations through expert articles covering topics from identity security to quantum readiness and emerging threats. (2) --- [Skip to content](https://csacyber.com/blog/page/2#main-content) [![CSA Cyber - Cyber Security Solutions to Protect your People](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=300&height=108&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber - Cyber Security Solutions to Protect your People")](https://csacyber.com/) - Services - [Offensive Security Services](https://csacyber.com/offensive-security-services) - [Penetration Testing](https://csacyber.com/penetration-testing) - [Red Teaming and attack simulations](https://csacyber.com/offensive-security-services#red-teaming) - [Continuous testing](https://csacyber.com/offensive-security-services#continuous-assurance) - [Managed offensive security](https://csacyber.com/offensive-security-services#managed-offensive) - [Consultancy Services](https://csacyber.com/cyber-consultancy-services) - [Frameworks & assessments](https://csacyber.com/cyber-consultancy-services/frameworks-and-assessments) - [Data protection](https://csacyber.com/cyber-consultancy-services#data-protection) - [Virtual leadership](https://csacyber.com/cyber-consultancy-services#virtual-leadership) - [Technical security consulting](https://csacyber.com/cyber-consultancy-services#technical-consultancy) - [Governance, Risk & Compliance (GRC)](https://csacyber.com/cyber-consultancy-services/governance-risk-and-compliance-services) - [Extended Managed Security Services](https://csacyber.com/extended-managed-security-services) - [Microsoft Sentinel SIEM](https://csacyber.com/extended-managed-security-services#microsoft-sentinel) - [SOC services](https://csacyber.com/extended-managed-security-services#soc-services) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/extended-managed-security-services#cyber-helpdesk) - [Incident Response Services](https://csacyber.com/incident-response-services) - [Emergency Incident Response](https://csacyber.com/urgent/emergency-incident-response) - [Incident Response Retainer](https://csacyber.com/incident-response-services) - [Cyber Incident Readiness & Response Planning](https://csacyber.com/incident-response-services) - [Tabletop Exercises & Live-Range Engagements](https://csacyber.com/incident-response-services) - [Specialist Security Services](https://csacyber.com/specialist-services) - [AI Security](https://csacyber.com/cyber-services-for-ai) - [Operational Technology (OT)](https://csacyber.com/specialist-services#operational-technology) - [Cyber security for Private Equity](https://csacyber.com/specialist-services#mergers-and-acquisitions) - [Cyber training and education](https://csacyber.com/specialist-services#training-and-education) - [Virtual leadership](https://csacyber.com/specialist-services#leadership) - [Cyber Technologies](https://csacyber.com/cyber-technologies) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/cyber-technologies#sentinelone) - [AppGuard Endpoint & Server Zero Trust Protection](https://csacyber.com/cyber-technologies#appguard) - [Qualys Vulnerability Management as a Service (VMaaS)](https://csacyber.com/cyber-technologies#qualys-vmaas) - [Lookout Mobile Device Protection](https://csacyber.com/cyber-technologies#lookout) - [ThreatER DNS Protection](https://csacyber.com/cyber-technologies#threater-dns) - [Cyber Security Awareness & Training platform](https://csacyber.com/cyber-technologies#boxphish) - [About](https://csacyber.com/about-us) - [Careers](https://csacyber.com/careers) - [Certifications](https://csacyber.com/certifications-and-awards) - [Blog](https://csacyber.com/blog) - [Support Centre](https://csacyber.com/support) - Resources - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Partners](https://csacyber.com/partners) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) - [Contact](https://csacyber.com/contact-us) - Search Search Search # Blog - [All](https://csacyber.com/blog/all) - [Article](https://csacyber.com/blog/tag/article) - [Consultancy](https://csacyber.com/blog/tag/consultancy) - [Security Operations](https://csacyber.com/blog/tag/security-operations) - [News](https://csacyber.com/blog/tag/news) - [Penetration Testing](https://csacyber.com/blog/tag/penetration-testing) - [Threat Briefing](https://csacyber.com/blog/tag/threat-briefing) [![](https://csacyber.com/hubfs/undefined-Mar-20-2026-11-17-32-4411-AM.png)](https://csacyber.com/blog/how-identity-estates-fuel-modern-breaches) - [Jack Gilmore](https://csacyber.com/blog/author/jack-gilmore) - March 20, 2026 ### [Hybrid identity, fragmented security: How identity estates fuel modern breaches](https://csacyber.com/blog/how-identity-estates-fuel-modern-breaches) In this article, I will cover why hybrid identities can lead to fragmented security and reduced visibility when strong... [Read more](https://csacyber.com/blog/how-identity-estates-fuel-modern-breaches) [![](https://csacyber.com/hubfs/social-engineering.jpg)](https://csacyber.com/blog/preparing-for-the-quantum-shift-why-post-quantum-readiness-cannot-wait) - [David Woodfine](https://csacyber.com/blog/author/david-woodfine) - February 6, 2026 ### [Preparing for the quantum shift: Why post-quantum readiness cannot wait](https://csacyber.com/blog/preparing-for-the-quantum-shift-why-post-quantum-readiness-cannot-wait) The debate around quantum risk is gathering momentum, and rightly so. Research such as Mastercard’s recent exploration... [Read more](https://csacyber.com/blog/preparing-for-the-quantum-shift-why-post-quantum-readiness-cannot-wait) [![](https://csacyber.com/hubfs/blog-banner-logo.png)](https://csacyber.com/blog/cve-2026-21509-analysis-the-ghost-in-the-document) - [Steve Velcev](https://csacyber.com/blog/author/steve-velcev) - February 2, 2026 ### [CVE-2026-21509 Analysis: The ghost in the document](https://csacyber.com/blog/cve-2026-21509-analysis-the-ghost-in-the-document) In January 2026, Microsoft confirmed active exploitation of a high-severity zero-day, CVE-2026-21509, targeting the... [Read more](https://csacyber.com/blog/cve-2026-21509-analysis-the-ghost-in-the-document) [![](https://csacyber.com/hubfs/CSR-bill.jpg)](https://csacyber.com/blog/cyber-security-and-resilience-bill-what-it-means) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - January 5, 2026 ### [Cyber Security and Resilience Bill: What it means for UK businesses](https://csacyber.com/blog/cyber-security-and-resilience-bill-what-it-means) On 12 November 2025, the Government introduced the Cyber Security and Resilience (Network and Information Systems) Bill... [Read more](https://csacyber.com/blog/cyber-security-and-resilience-bill-what-it-means) [![](https://csacyber.com/hubfs/CSA%20featured%20images%20right%20size5.png)](https://csacyber.com/blog/how-does-cyber-security-enhance-it-security) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - October 3, 2025 ### [How does cyber security enhance IT security?](https://csacyber.com/blog/how-does-cyber-security-enhance-it-security) With cyber threats achieving increasing complexity, organisations can no longer rely solely on IT security to protect... [Read more](https://csacyber.com/blog/how-does-cyber-security-enhance-it-security) [![](https://csacyber.com/hubfs/large-CAF%20image.jpg)](https://csacyber.com/blog/caf-4.0-explained) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - September 2, 2025 ### [CAF 4.0 Explained: What's new and why it matters](https://csacyber.com/blog/caf-4.0-explained) The NCSC have recently released version 4.0 of the Cyber Assessment Framework (CAF), a common framework to enable... [Read more](https://csacyber.com/blog/caf-4.0-explained) [![phishing threats](https://csacyber.com/hubfs/Emerging%20phishing%20threats%20and%20mitigations%20in%202025.jpg)](https://csacyber.com/blog/emerging-phishing-threats-and-mitigations-in-2025) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 25, 2025 ### [Emerging phishing threats and mitigations in 2025](https://csacyber.com/blog/emerging-phishing-threats-and-mitigations-in-2025) If you’ve been defending organisations for more than a few years, phishing used to be straightforward: spray and pray... [Read more](https://csacyber.com/blog/emerging-phishing-threats-and-mitigations-in-2025) [![vCISO](https://csacyber.com/hubfs/vCISO%20vs%20Fractional%20CISO%20Which%20is%20best%20for%20your%20business.jpg)](https://csacyber.com/blog/vciso-vs-fractional-ciso) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - August 21, 2025 ### [vCISO vs Fractional CISO? Which is best for your business?](https://csacyber.com/blog/vciso-vs-fractional-ciso) Introduction to virtual services Businesses today are increasingly turning to virtual services to meet their cyber... [Read more](https://csacyber.com/blog/vciso-vs-fractional-ciso) [![access control](https://csacyber.com/hubfs/The%20importance%20of%20authorisation%20controls%20%28Access%20Control%29-1.jpg)](https://csacyber.com/blog/the-importance-of-authorisation-controls-access-control) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - July 14, 2025 ### [The importance of authorisation controls (Access Control)](https://csacyber.com/blog/the-importance-of-authorisation-controls-access-control) Overview Access controls are essential in ensuring that only the authorised users are able to access certain resources.... [Read more](https://csacyber.com/blog/the-importance-of-authorisation-controls-access-control) [![multi factor authentication](https://csacyber.com/hubfs/The%20importance%20of%20Multi-Factor%20Authentication%20%28MFA%29-1.jpg)](https://csacyber.com/blog/the-importance-of-multi-factor-authentication-mfa) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - July 1, 2025 ### [The importance of Multi-Factor Authentication (MFA)](https://csacyber.com/blog/the-importance-of-multi-factor-authentication-mfa) Overview [Read more](https://csacyber.com/blog/the-importance-of-multi-factor-authentication-mfa) [![cyber MFA protection ](https://csacyber.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20digital%20landscape%20illustrating%20the%20concept%20of%20Perfect%20Forward%20Secrecy%20PFS%20in%20cryptography%20In%20the%20foreground%20a%20sleek%20digital%20padlock%20symbolizes%20security%20surrounded%20by%20glowing%20lines%20of%20binary%20code%20that%20flow%20seamlessly%20across.png)](https://csacyber.com/blog/perfect-forward-secrecy-pfs-the-way-to-further-strengthen-confidentiality-of-data-in-transit) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - June 27, 2025 ### [Perfect Forward Secrecy (PFS): The way to further strengthen confidentiality of data in transit](https://csacyber.com/blog/perfect-forward-secrecy-pfs-the-way-to-further-strengthen-confidentiality-of-data-in-transit) Overview [Read more](https://csacyber.com/blog/perfect-forward-secrecy-pfs-the-way-to-further-strengthen-confidentiality-of-data-in-transit) [![Why preventing username enumeration is important](https://csacyber.com/hubfs/Why%20preventing%20username%20enumeration%20is%20important.jpg)](https://csacyber.com/blog/why-preventing-username-enumeration-is-important) - [CSA Cyber](https://csacyber.com/blog/author/csa-cyber) - June 24, 2025 ### [Why preventing username enumeration is important?](https://csacyber.com/blog/why-preventing-username-enumeration-is-important) Overview [Read more](https://csacyber.com/blog/why-preventing-username-enumeration-is-important) [PREVIOUS](https://csacyber.com/blog) [1](https://csacyber.com/blog) [2](https://csacyber.com/blog/page/2) [3](https://csacyber.com/blog/page/3) [4](https://csacyber.com/blog/page/4) [5](https://csacyber.com/blog/page/5) [NEXT](https://csacyber.com/blog/page/3) [![CSA Cyber Logo FNL\_Full Logo](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=3463&height=1248&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber Logo FNL_Full Logo")](https://csacyber.com/) Established in 2013, Cyber Security Associates Limited trading as CSA Cyber provides cyber consultancy and cyber managed services which help to detect, protect and educate against the ever-changing cyber threat. We have built our team from a foundation of Government (ex-Military) and Commercially experienced specialists all holding current and relevant cyber certifications. Today our core services are based around a 24/7 Security Operations Centre (SOC) based in Gloucester. #### News & Resources - [Blog](https://csacyber.com/blog) - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Careers](https://csacyber.com/careers) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) #### Quick Links - [About Us](https://csacyber.com/about-us) - [Certifications](https://csacyber.com/certifications-and-awards) - [Our Parent Company](https://www.fluidone.com) - [Partners](https://csacyber.com/partners) - [Contact Us](https://csacyber.com/contact-us) - [Anti Bribery Policy](https://csacyber.com/hubfs/CSAAnti-BriberyPolicy.pdf) - [Complaints Policy](https://csacyber.com/hubfs/CSAComplaintsPolicy.pdf) - [Corporate Social Responsibility Policy](https://csacyber.com/hubfs/CSACorporateSocialResponsibilityPolicy.pdf) - [Slavery and Human Trafficking Statement](https://csacyber.com/hubfs/CSASlaveryandHumanTraffickingStatement.pdf) - [NCSC CHECK Status Verification](https://www.ncsc.gov.uk/organisation/csa-cyber/check-penetration-testing) - [CREST Approved Certification Verification](https://www.crest-approved.org/member_companies/csa-cyber/) #### Contact Information **United Kingdom - London** Cyber Security Associates Ltd 5 Hatfields, London, SE1 9PG   **United Kingdom - Gloucester** Cyber Security Associates Ltd Unit 11, Wheatstone Court, Waterwells Business Park, GL2 2AQ   **Phone:** [+44(0) 300 303 4691](tel:03003034691) **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   **United States of America** Cyber Security Associates Inc. 6010 W. Spring Creek Pkwy, Plano, Texas, 75024   **Phone:** [+1 469 750 1695](tel:14697501695)  **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   [![trust-pilot](https://csacyber.com/hs-fs/hubfs/trust-pilot.png?width=178&height=104&name=trust-pilot.png)](https://uk.trustpilot.com/review/csa.limited)   --- - [Website Terms of Use](https://csacyber.com/website-terms-of-use) - [Website Privacy Policy](https://csacyber.com/privacy-notice) - [Website Cookie Policy](https://csacyber.com/cookie-policy) Copyright 2026. Cyber Security Associates Ltd [Follow us on Facebook](https://www.facebook.com/CSALIMITED/) [Follow us on LinkedIn](https://www.linkedin.com/company/csa-cyber/) [Follow us on Twitter](https://twitter.com/cybersecurityis) [Follow us on Facebook](https://www.youtube.com/@cybersecurityassociateslim) [Follow us on Facebook](https://www.instagram.com/cybersecurityassociates)