https://www.apollo-sec.com/savountResearch and analysis on cyber conflict, AI and the powers behind them.en-gbhttps://www.apollo-sec.com/savount/dont-give-your-ai-agent-the-keys-to-the-kingdomhttps://www.apollo-sec.com/savount/dont-give-your-ai-agent-the-keys-to-the-kingdomThu, 02 Apr 2026 00:00:00 +0000Securing agentic AI before it becomes your biggest attack surface: prompt injection, memory poisoning, tool misuse and the defences that work.https://www.apollo-sec.com/savount/securing-new-agentic-workershttps://www.apollo-sec.com/savount/securing-new-agentic-workersThu, 02 Apr 2026 00:00:00 +0000A practical hardening guide for desktop AI agents: sandboxing, allow-lists, secrets, logging, and keeping work and personal contexts apart.https://www.apollo-sec.com/savount/how-to-secure-your-devops-pipeline-risks-tools-and-best-practiceshttps://www.apollo-sec.com/savount/how-to-secure-your-devops-pipeline-risks-tools-and-best-practicesSun, 25 May 2025 00:00:00 +0000The risks in modern CI/CD pipelines, the tools that help, and the practices that keep secrets, dependencies and build systems away from attackers.https://www.apollo-sec.com/savount/lessons-from-recent-cyberattackshttps://www.apollo-sec.com/savount/lessons-from-recent-cyberattacksSun, 25 May 2025 00:00:00 +0000M&S, Co-op and Harrods, Cartier and Coinbase: what recent attacks have in common, the techniques used, and what defenders should take from them.https://www.apollo-sec.com/savount/emulating-the-enemy-how-adversary-emulation-is-elevating-offensive-securityhttps://www.apollo-sec.com/savount/emulating-the-enemy-how-adversary-emulation-is-elevating-offensive-securityFri, 25 Apr 2025 00:00:00 +0000How adversary emulation moved offensive security beyond the annual penetration test, and how to use real attacker behaviour to test your defences.https://www.apollo-sec.com/savount/replacing-annual-penetration-testing-with-continuous-pen-testinghttps://www.apollo-sec.com/savount/replacing-annual-penetration-testing-with-continuous-pen-testingFri, 25 Apr 2025 00:00:00 +0000Why a yearly penetration test describes a system that no longer exists, and how continuous penetration testing closes the gap.https://www.apollo-sec.com/savount/critical-vulnerabilities-keep-coming-the-urgency-of-proactive-securityhttps://www.apollo-sec.com/savount/critical-vulnerabilities-keep-coming-the-urgency-of-proactive-securitySun, 30 Mar 2025 00:00:00 +0000The gap between disclosure and exploitation keeps shrinking. Why critical vulnerabilities demand continuous, proactive security, not a yearly test.https://www.apollo-sec.com/savount/lessons-from-hellcats-jira-breaches-identity-based-attacks-on-the-rise-in-2025https://www.apollo-sec.com/savount/lessons-from-hellcats-jira-breaches-identity-based-attacks-on-the-rise-in-2025Sun, 30 Mar 2025 00:00:00 +0000No zero-days and no novel malware: how the Hellcat crew breached enterprise Jira with stolen credentials, and the identity defences that stop it.https://www.apollo-sec.com/savount/from-perimeter-to-identity-the-new-saas-attack-frontierhttps://www.apollo-sec.com/savount/from-perimeter-to-identity-the-new-saas-attack-frontierWed, 05 Mar 2025 00:00:00 +0000Single sign-on, session tokens and MFA fatigue: why identity is now the main attack surface for SaaS, and how to defend it.https://www.apollo-sec.com/savount/the-costly-reality-of-cybersecurity-gaps-for-smbshttps://www.apollo-sec.com/savount/the-costly-reality-of-cybersecurity-gaps-for-smbsWed, 05 Mar 2025 00:00:00 +0000What security gaps really cost small and mid-sized businesses, from breaches and downtime to ransomware and fines, and how to build resilience on a budget.https://www.apollo-sec.com/savount/threat-actors-ttps-you-need-to-watch-in-2025https://www.apollo-sec.com/savount/threat-actors-ttps-you-need-to-watch-in-2025Sun, 09 Feb 2025 00:00:00 +0000Five attacker techniques to watch: non-human identity attacks, pass-the-hash, supply chain compromise, Golden SAML and stolen remote access credentials.https://www.apollo-sec.com/savount/navigating-supply-chain-riskshttps://www.apollo-sec.com/savount/navigating-supply-chain-risksFri, 06 Dec 2024 00:00:00 +0000Why a supplier’s weakness becomes yours: lessons from SolarWinds, Log4Shell and Okta, and how to protect your organisation from supply chain attacks.https://www.apollo-sec.com/savount/cyber-breach-survey-insights-the-need-to-know-for-uk-businesses-and-charitieshttps://www.apollo-sec.com/savount/cyber-breach-survey-insights-the-need-to-know-for-uk-businesses-and-charitiesFri, 01 Nov 2024 00:00:00 +0000Key findings from the UK Cyber Security Breaches Survey 2024: what breaches cost, why phishing leads, and where boards stand on cyber risk.https://www.apollo-sec.com/savount/preparing-for-the-digital-operational-resilience-act-dora-how-financial-services-can-comply-with-new-eu-it-resilience-legislationhttps://www.apollo-sec.com/savount/preparing-for-the-digital-operational-resilience-act-dora-how-financial-services-can-comply-with-new-eu-it-resilience-legislationFri, 01 Nov 2024 00:00:00 +0000Who the EU Digital Operational Resilience Act applies to, what it asks of financial services firms, and how to prepare for it.https://www.apollo-sec.com/savount/enhancing-cloud-security-a-multi-layered-approachhttps://www.apollo-sec.com/savount/enhancing-cloud-security-a-multi-layered-approachWed, 07 Aug 2024 00:00:00 +0000How attackers exploit cloud storage, web applications and deployments, and a layered approach to securing them, from zero trust to data security.https://www.apollo-sec.com/savount/living-on-the-edge-an-adversary-playgroundhttps://www.apollo-sec.com/savount/living-on-the-edge-an-adversary-playgroundSat, 01 Jun 2024 00:00:00 +0000A walk through an engagement: how edge devices, leaked cloud keys and an open Trello board gave an attacker a path in, one step at a time.https://www.apollo-sec.com/savount/offense-is-the-best-defensehttps://www.apollo-sec.com/savount/offense-is-the-best-defenseThu, 23 May 2024 00:00:00 +0000Why thinking like an attacker is the most effective way to defend, and the case for offensive security over checkbox compliance.https://www.apollo-sec.com/savount/the-essential-guide-to-penetration-testing-for-smbshttps://www.apollo-sec.com/savount/the-essential-guide-to-penetration-testing-for-smbsThu, 23 May 2024 00:00:00 +0000What penetration testing is, why small and mid-sized businesses are targeted, what testing gives you, and how often to do it.https://www.apollo-sec.com/savount/rising-tide-of-cyber-threatshttps://www.apollo-sec.com/savount/rising-tide-of-cyber-threatsThu, 09 May 2024 00:00:00 +0000The 2024 threat landscape in brief: the attack trends that shaped the year and the strategies organisations can use to respond.https://www.apollo-sec.com/savount/sbomhttps://www.apollo-sec.com/savount/sbomTue, 30 Apr 2024 00:00:00 +0000What a software bill of materials is, why transparency in software matters, and how SBOMs help secure the software supply chain.https://www.apollo-sec.com/savount/the-key-to-robust-securityhttps://www.apollo-sec.com/savount/the-key-to-robust-securityTue, 30 Apr 2024 00:00:00 +0000The basics that stop most attacks: least privilege, password hygiene, patching, email controls and training, and why regular testing matters.