Insights
JAG Secure featured in The Times
JAG Secure features in The Times this week. A piece by Bill Magee, published on Tuesday 6 October 2026 (page 22 of the Scotland edition), looks at how ready the UK is for cyberwarfare at a time when AI regulation and governance are lagging behind the threat. Jordan Glover, founder and principal tester at JAG Secure, is quoted on the difference between a vulnerability scan and a penetration test.
What the article covers
The piece draws on Edward Gibson, a former FBI supervisory special agent and once Microsoft’s chief security adviser in the UK, who argues that organisations need to put more weight on prevention so that losses are limited if a compromise does happen. It also points to the National Cyber Security Centre’s warnings about the scale of the global threat.
A scan is one piece of the puzzle
Jordan’s point is one that comes up with clients regularly. Vulnerability scans are widely marketed and they have a place, but on their own they can give false reassurance. A scan reports what an automated tool can see. It does not tell you what an attacker could do with it.
A penetration test is an authorised, simulated attack carried out by a person. The tester validates what the tools find, removes the false positives and works out what each weakness means in practice. The article quotes Jordan describing the result as a “set of verified findings linked directly to business risk”. That comes with practical remediation guidance and a retest to confirm the fixes hold.
It matters beyond the technical team. A jargon-free view of risk gives leadership something they can act on and share in confidence with clients, auditors and insurers.
Thanks to Bill Magee for including JAG Secure. The article ran in The Times under the headline As AI perils loom, we humans must raise our game.