Cycubix

Cycubix Cybersecurity that empowers
your vision. We help you to build your secure, resilient future — without fear.

Cycubix offers a business centric approach to addressing the security of business applications. With an in-depth understanding of the challenges posed by the technical environment, the threat landscape and compliance issues and the best practices, education and insights and tools to ensure that applications are secure and the needs of the business (and their customers) are met. Cycubix plays an active role in the information security industry and with that comes access to a global network of expertise and insight that informs the solutions provided.

The recent ASOS security incident is a reminder that cybercriminals don't always need to break through technical defence...
14/10/2026

The recent ASOS security incident is a reminder that cybercriminals don't always need to break through technical defences. Sometimes, they simply need someone to trust them.

According to ASOS, an attacker gained access to an ASOS employee account by "impersonating a trusted contact to obtain log in credentials" which were then used to access information on third-party platforms. (More here via BBC News - https://www.bbc.co.uk/news/articles/c3zxjdw5ywgpo)

It's a real-world example of social engineering and something we've been exploring in our recent Cycubix insights.

Attackers exploit trust, authority and urgency to manipulate human behaviour. And while security awareness is important, protecting an organisation can't rely on employees recognising every threat, every time.

We've explored these risks in three recent articles:

🔐 Cybersecurity Burnout: The Human Error Risk
https://www.cycubix.com/cybersecurity-insights/cybersecurity-burnout-human-error-risk

🧠 The Psychology of Social Engineering
https://www.cycubix.com/cybersecurity-insights/social-engineering-psychology-cialdini

🎣 Why People Fall for Phishing
https://www.cycubix.com/cybersecurity-insights/why-people-fall-for-phishing-psychological-triggers

The lesson? Cybersecurity isn't just about technology. It's about understanding human behaviour and putting the right safeguards in place.

At Cycubix, we help organisations identify risks and strengthen their security defences. Get in touch to discuss how we can support your business.

Building with AI doesn't always start as an official project.It can start with the people closest to a business problem....
08/10/2026

Building with AI doesn't always start as an official project.

It can start with the people closest to a business problem. A product manager prototypes an AI assistant. An operations team builds an automation. Many have no engineering background, yet their solutions deliver value within days.

But when these tools process sensitive data, influence decisions or plug into core workflows without visibility or oversight, it becomes hard to know what exists, how it works or where the exposure lies.

That's the challenge of Shadow AI.

The answer isn't to stop teams building with AI. It's to identify what already exists, assess the risks and build security and governance around these tools, including alignment with the EU AI Act.

In our article, we explore how organisations can move from Shadow AI to secure AI that can scale.

🔐 Read the full article: https://www.cycubix.com/cybersecurity-insights/shadow-ai-to-secure-ai

Is your organisation facing similar challenges? How are you approaching them?

We’re proud to share that Cycubix has achieved ISO/IEC 27001:2022 certification with West Assured. For us, this is more ...
06/10/2026

We’re proud to share that Cycubix has achieved ISO/IEC 27001:2022 certification with West Assured.

For us, this is more than a badge. It provides independent assurance that the way we manage and protect information is underpinned by a robust Information Security Management System (ISMS) aligned with an internationally recognised standard.

For our clients, it means greater confidence in how information security is managed across our business, from the processes and controls we have in place to the way we identify, assess and manage risk.

As a cybersecurity business, we know that trust has to be demonstrated, not simply promised. Achieving ISO/IEC 27001:2022 certification is an important validation of the standards we set for ourselves and the assurance we provide to the organisations we work with.

A big thank you to the Cycubix team and to West Assured for their support throughout the certification process.

If you’d like to talk to us about strengthening information security within your own organisation, schedule a call with the Cycubix team to discuss how we can help.

https://calendar.google.com/calendar/u/0/appointments/schedules/AcZssZ065sFUNP2EBKEk4vzKBTLdiNZfNwBMCImDkioz45YY3ssdf4e56H4cFTXi4LejyRvYrPLU8Te5

Ireland has new guidance for how organisations should handle vulnerability disclosures, and the timing matters.If you ma...
02/10/2026

Ireland has new guidance for how organisations should handle vulnerability disclosures, and the timing matters.

If you manufacture products with digital elements, including software, CRA Article 14 reporting obligations apply to you as of 11 September 2026. Actively exploited vulnerabilities and severe incidents must be reported to your national CSIRT (the NCSC, if your main establishment is in Ireland) and ENISA:
⏱️ Early warning within 24 hours
⏱️ Notification within 72 hours
⏱️ Final report within 14 days of a fix, or one month for a severe incident

Full CRA compliance, including a coordinated vulnerability disclosure policy, is required from 11 December 2027.

In our latest insight, Fabio Cerullo explains what the new National Cyber Security Centre framework means in practice, including:
🔐 Building a clear vulnerability reporting process
🔍 Defining scope and managing technical triage
📋 Connecting CVD with NIS2, the CRA and ISO 27001

A security.txt file tells researchers where to report a vulnerability. The bigger question is: is your organisation ready for what happens next?

Read the full article: https://www.cycubix.com/cybersecurity-insights/ireland-coordinated-vulnerability-disclosure-guidance

Thank you, Porto! 🇵🇹 A huge thank you to the organisers and events team behind OWASP Appsec Days Portugal 2026 for such ...
28/09/2026

Thank you, Porto! 🇵🇹

A huge thank you to the organisers and events team behind OWASP Appsec Days Portugal 2026 for such a well-organised and welcoming event.

It was a fantastic few days and a great opportunity to connect with so many people from across the application security community, share ideas and have some really interesting conversations.

We’d also like to thank everyone who joined Fabio Cerullo’s Secure Coding for LLM Applications training. We hope you enjoyed the session and came away with plenty of practical insights to take back to your own teams and organisations.

It was a pleasure to be part of the event, hosted at the fantastic Fundação António Cupertino de Miranda, and to spend some time in the beautiful city of Porto.

We hope to see you again soon! Keep an eye on our channels for details of future Cycubix training events.

New technologies. New security challenges. Cybersecurity training is most valuable when it reflects the applications you...
25/09/2026

New technologies. New security challenges.

Cybersecurity training is most valuable when it reflects the applications your teams are building and the risks they’re responsible for managing.

Cycubix Team Training offers practical, expert-led training across a range of areas – from secure coding in Java, .NET and Ruby, to PCI DSS, AI & LLM application security, Web Application Security Essentials and Threat Modeling.

Whether you’re strengthening secure development practices, responding to new technologies or preparing for compliance requirements, training can be tailored around your organisation, team and technology stack.

Delivered online or in person, our courses are designed to give teams practical knowledge they can apply in their day-to-day work.

Start building the cybersecurity skills your teams will need in 2027.
Explore Cycubix Team Training: https://www.cycubix.com/trainings

A big thank you to Cyber Ireland for a great Cyber Solutions Day in Kilkenny. Congratulations to Cyber Cert Labs on the ...
24/09/2026

A big thank you to Cyber Ireland for a great Cyber Solutions Day in Kilkenny.

Congratulations to Cyber Cert Labs on the win, and to Ailtire and CWSI for their excellent pitches. It was great to be part of such a strong line-up of cybersecurity solutions.

Thank you also to the CISO Forum panel for their time, questions and feedback, and to everyone who came over afterwards to share their own experiences and tell us what they’d want to see from our solution. We came away with plenty to think about.

One of the key questions posed on the day was: how can compliance be operationalised to deliver real business value?

We presented ConsentScan by Cycubix, our approach to checking whether cookie consent is actually being enforced across public-facing websites.

It’s about going beyond having a consent solution in place and verifying that the control an organisation has already invested in is continuing to work as intended, including catching those moments when a website change quietly breaks it.

Thank you for the welcome ConsentScan received on the day.

And if you had a chance to try it out or speak to us about it in Kilkenny, we’d really like to hear your thoughts. What worked, what would you want to see next, and where could it be most useful for your organisation?

6 days to go! 🇵🇹 We’re looking forward to being in the beautiful city of Porto next week for OWASP Appsec Days Portugal ...
17/09/2026

6 days to go! 🇵🇹

We’re looking forward to being in the beautiful city of Porto next week for OWASP Appsec Days Portugal 2026.

On 23 September, Fabio Cerullo will be delivering Secure Coding for LLM Applications, bringing together developers and security professionals for a practical, hands-on session focused on securing the next generation of AI-powered applications.

📍 Porto, Portugal
🗓️ 23 September 2026
🕘 9:00am–1:00pm

After months of planning, we’re looking forward to meeting everyone joining us in Porto.
See you there!

And if you’d still like to join us, there may be time to secure a last-minute place:
https://www.cycubix.com/cybersecurity-insights/llm-security-training-porto-2026

Claude Tag isn’t just another AI chatbot. And that changes the security conversation. Operating directly within Slack, C...
15/09/2026

Claude Tag isn’t just another AI chatbot. And that changes the security conversation.

Operating directly within Slack, Claude Tag can hold long-term channel memory, work asynchronously and connect to other systems using its own standing access.

That brings new possibilities for teams, but also new questions around access, authorisation and accountability.

In our latest video, Cycubix takes a closer look at the security implications of Claude Tag, including seven key risks organisations should be aware of – from authorisation laundering and overexposure of sensitive data to indirect prompt injection.

We also explore the practical governance controls organisations can put in place and share a phased 30-day approach to rolling out Claude Tag more securely.

If your organisation is exploring autonomous AI agents, this is well worth understanding before giving them access to business-critical systems.

▶️ Watch the full video: https://www.youtube.com/watch?v=bPf2fQpmrIs
🔐 Looking for support with your organisation’s cybersecurity? Get in touch with the Cycubix team: https://www.cycubix.com/contact

09/09/2026

Final call for Porto.

Registration is closing soon for Secure Coding for LLM Applications, delivered by Fabio Cerullo at OWASP Appsec Days Portugal 2026.

Taking place on 23 September, this hands-on training is designed for those building and securing AI-powered applications, with practical guidance on the OWASP Top 10 for LLM Applications, prompt injection, AI-specific attacks, secure design patterns and defensive controls.

If LLM security is becoming part of your role, your development process or your organisation’s wider security strategy, this is an opportunity to build practical skills you can put into use straight away.

And where better to do it than the beautiful city of Porto?

📍 Porto, Portugal
🗓️ 23 September 2026
🕘 9:00am–1:00pm

Registrations are closing soon. Find out more and secure your place:
https://appsecdays.pt/trainings/llm-security.html

Address

Harcourt Centre, Harcourt Road, Block 4
Dublin
D02HW77

Opening Hours

Monday 9am - 5pm
Tuesday 9am - 5pm
Wednesday 9am - 5pm
Thursday 9am - 5pm
Friday 9am - 5pm

Alerts

Be the first to know and let us send you an email when Cycubix posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Cycubix:

Shortcuts

Share