It would appear that the Windows 10 ESU deadline, the date after which machines stop receiving security updates, has been extended. According to the Microsoft blog https://blogs.windows.com/windowsexperience/2025/06/24/stay-secure-with-windows-11-copilot-pcs-and-windows-365-before-support-ends-for-windows-10/, “Once you select an option and follow the on-screen steps, your PC will automatically be enrolled. ESU coverage for personal devices runs from Oct. 15, 2025, through Oct. […]
Data Protection
Watch out for holiday season scam emails
The summer break can be a time when we may all receive a higher number of scam emails, which take advantage of people being away and so roles being undertaken by people with less experience. Here is a reminder of the guidance from the National Cyber Security Centre https://www.ncsc.gov.uk/collection/phishing-scams/spot-scams.
Do you enable auto-complete?
It is often the case that the more convenient something is, the more data protection risk it might present. The use of email address auto-complete (sometimes called auto-fill) is an example of this. Sending an email containing personal data to the wrong person, can be a common cause of a data breach, but the risk […]
What should you tell donors when it comes to using AI?
This question is being asked more and more, and Blackbaud have a helpful blog to suggest how you can approach this and maintain donor trust. It’s very much worth a read at https://www.blackbaud.co.uk/industry-insights/resources/ai-and-donor-engagement-what-to-tell-donors-and-how-to-protect-trust.
New free cyber action toolkit
We have previously recommended the NCSC’s Small Charity Guide as a way of benchmarking your cybersecurity plans. The National Cyber Security Centre has launched a replacement, being the Cyber Action Toolkit. It offers a layered (Foundation, Improver and Enhanced) approach and a customised toolkit based on three simple questions. We commend it, and suggest that […]