Author: Lucy Neill

Why Traditional VPNs No Longer Cut It – and What You Can Do Instead

The way we work has changed. Remote and hybrid teams are now part of everyday business life, with staff logging in from offices, homes, airports, and everywhere in between. But while the way we work has evolved, the way we secure that work often hasn’t.

41% of UK workers engaged in remote work at least part of the week as of October 2024, with 28% adopting a hybrid model, and 13% working from home full-time. (Office for National Statistics, 2024)

If your business still relies on traditional VPNs or cobbled-together remote access tools, you could be exposing sensitive data and systems to unnecessary risk.

The New Reality of Remote Work

Whether you handle customer records, financial data, or internal IP, remote access is now a gateway that needs to be as secure as it is seamless. But VPNs (once considered the gold standard for remote access) weren’t built for a world of hybrid work, personal devices, and cloud apps.

Here’s where they fall short:

• Too much access: VPNs often provide blanket access to the full network. If one account is compromised, the attacker can move freely across your systems.
• Lack of visibility: It’s tough to track who accessed what, when, and from where—making it harder to detect threats or meet compliance requirements like GDPR.
• User friction: VPNs can be slow, unreliable, and frustrating especially on personal devices or spotty home internet.
• Outdated threat protection: Today’s cyber threats ransomware, phishing, insider attacks—demand smarter, more adaptive defences.

A Smarter Way: Zero Trust Access with SonicWall

To stay protected, many businesses are now switching to SonicWall Cloud Secure Edge – Secure Private Access (CSE SPA). Built for modern work environments, it’s a cloud-native security solution designed to provide access without opening up your whole network.

Here’s how it works:

• Zero Trust approach: Nobody gets access just because they know a password. The system verifies identity, device, location, and intent.
• Granular permissions: Users only get access to the specific apps and data they need.
• Real-time monitoring: Suspicious behaviour? The system reacts immediately, adapting access and alerting IT teams.
• No hardware headaches: It’s built in the cloud, with no servers to manage, so it can scale as your business grows.

Business Benefits That Matter

For business leaders, SonicWall CSE SPA offers a way to protect your operations without slowing people down. For IT managers, it’s a smarter, easier way to manage access and reduce risk.

• Support compliance by tracking access and user behaviour.
• Simplify IT management with centralised control and clear policies.
• Boost productivity with fast, seamless access from any device.
• Contain threats before they spread, even if a breach occurs.

Whether your team is on the road, working from home, or in multiple offices, this is remote access the way it should be: secure, simple, and built for today’s risks.

Ready to Secure Your Remote Workforce?

At Leaf IT, we help businesses in Northern Ireland, Ireland and the UK adopt modern, secure technology that supports growth, not risk. As SonicWall experts, we’ll guide you through setup, access policies, training, and ongoing support, so your team can work confidently and securely, wherever they are.

Let’s talk about securing your business:  hello@leaf-it.com | +44 2890 897650 | leaf-it.com

Microsoft 365 Copilot: AI That Works for Your Business, Securely

AI is transforming the way we work—but not all AI tools are created equal. While platforms like ChatGPT have sparked mainstream excitement, they often raise serious concerns about data security, compliance, and control. For businesses handling sensitive customer data, intellectual property, or regulatory requirements, relying on open AI platforms can carry real risk.

That’s where Microsoft 365 Copilot stands out.

Built into familiar Microsoft apps like Word, Excel, Outlook, and Teams, Copilot is your intelligent, secure AI assistant. Designed specifically for enterprise-grade performance and privacy. Backed by Microsoft’s rigorous security framework and hosted entirely within your Microsoft 365 environment, Copilot ensures that your data never leaves your control.

The Risk of Using Open AI Tools at Work

Many freely available AI tools process queries via public or third-party servers, storing input data that can be used to train future models. That may be acceptable for personal use, but in a business context, this could expose:

· Confidential client information

· Internal strategies or financial data

· GDPR-protected personal data

According to Gartner, by 2026, 30% of large organisations will ban the use of public generative AI tools due to privacy and security concerns. For regulated industries, from finance to healthcare, the risk is too great to ignore.

Why Microsoft 365 Copilot is Different

Copilot is Microsoft’s AI-powered assistant, built directly into the Microsoft 365 apps your business already uses, like Word, Excel, Outlook, PowerPoint, and Teams. It combines the power of large language models with your business data to help you create, summarise, analyse, and automate work in seconds.

With Microsoft 365 Copilot:

· Your data stays within your Microsoft 365 tenant.

· It complies with Microsoft’s enterprise-grade security, identity, and compliance controls.

· You get full transparency and control over how AI is used in your business.

Copilot can:

· Draft documents, emails, and reports in seconds

· Generate insights and forecasts from complex Excel data

· Create high-quality presentations with a few prompts

· Summarise Teams meetings and assign follow-up tasks automatically

· And so much more.

It’s already driving results. A Microsoft study showed that users of Copilot were 29% faster at tasks like writing and summarising, and 70% said they were more productive overall.

Transform Your Workplace with Confidence

At Leaf IT, we help businesses adopt technology that works for them, not against them. As an accredited Microsoft Solutions Partner for Modern Work, we guide you through Copilot setup, governance, and training, ensuring you unlock maximum value while staying secure and compliant.

Let’s talk about how Copilot can transform the way you work—safely, securely, and smartly.

Contact us: hello@leaf-it.ie | +353 (0) 1 582 4075 | leaf-it.ie

At Leaf IT, we’ve always prided ourselves on delivering best-in-class IT solutions, forward-thinking strategy, and cybersecurity excellence to our clients across Ireland and the UK. Now, we’re delighted to announce that our efforts have been recognised at the highest level.

Out of more than 1,000 MSPs across the UK and Ireland that ConnectWise trade with, just 250 meet the standards required to join the ConnectWise Partner Program.

From those, only 11 partners have achieved Pinnacle Partner status – and we’re proud to share that Leaf IT is one of them.

Even more significantly, we’re one of only two Pinnacle Partners in Ireland, marking us as a true leader in the channel when it comes to innovation, service delivery, and strategic growth.

What is a Pinnacle Partner?

The Pinnacle tier is the highest level in the ConnectWise Partner Program – and it’s invite only. Partners who achieve this milestone must demonstrate:

• Consistently high growth rates
• Best-in-class service delivery to end clients
• A forward-thinking mindset and collaborative success in executing mutual action plans

The ConnectWise Partner Program itself is no ordinary recognition. It’s been awarded 5 stars in CRN’s 2025 Partner Program Guide, recognised as an industry-leading initiative that drives innovation, collaboration, and value across the IT channel.

A Legacy of Partnership and Performance

This milestone follows another standout moment for Leaf IT – when we were named ConnectWise Global Cybersecurity Partner of the Year in 2023. It was a major highlight in a year that saw our Cybersecurity practice grow significantly and deliver measurable impact for clients in sectors including manufacturing, professional services, healthcare, and not-for-profit.

We’ve worked hard to align closely with ConnectWise’s vision – and our shared success is a result of that continued commitment.

Driving Cybersecurity Forward – Together

We’re not resting on our laurels. This year, we’re continuing to lead from the front, helping organisations across the island of Ireland prepare for incoming regulations like NIS2 – and we’ll be co-hosting a dedicated NIS2-readiness event with ConnectWise in Dublin this May.

This event will give IT leaders and security professionals the clarity and actionable insight needed to get ahead of compliance, while improving their overall security posture with modern, managed cybersecurity tools.

Find out more and register today by visiting our event page, or get in touch with our team over at Rachel.morrow@leaf-it.com.

Our Commitment to Excellence

Being a Pinnacle Partner is more than just a badge – it’s a reflection of our ongoing drive to deliver value, reduce risk, and give our clients the confidence to grow safely and securely in today’s evolving threat landscape.

To our clients, partners, and team: thank you. This recognition belongs to all of us – and it’s only the beginning.

Want to know how Leaf IT can support your cybersecurity journey or compliance with NIS2?

Get in touch today:

• hello@leaf-it.com
• +44 2890 897650
• Leaf-it.com

In today’s rapidly evolving digital landscape, cybersecurity is a top priority for businesses across the UK and Europe. The NIS2 Directive is a crucial step in strengthening the EU’s cybersecurity framework, with expanded scope, stricter security requirements, and tougher penalties, NIS2 is a regulation that businesses cannot afford to ignore.

More than just a guideline, NIS2 is a legal requirement, and businesses failing to comply could face severe penalties—up to €10 million (£8.6 million) in fines.

What is the NIS2 Directive?

The NIS2 Directive (Directive (EU) 2022/2555) builds upon the original Network and Information Security (NIS) Directive, strengthening cybersecurity measures across the EU. It was introduced to address emerging cyber threats, enhance risk management practices, and improve the resilience of critical infrastructure.

While the UK is no longer an EU member, NIS2 still holds relevance for British businesses, particularly those operating within Europe or handling data and services connected to EU-based clients or suppliers.

Who Does NIS2 Apply to?

NIS2 significantly expands the scope of the original NIS Directive, increasing the number of covered sectors from 7 to 15. By adding 8 new sectors, it ensures broader cybersecurity protections across a wider range of industries and businesses. The 15 sectors impacted by NIS2 are: Energy, Health, Transport, Finance, Water Supply, Digital Infrastructure, Public Administration, Postal Services, Digital Providers, Waste Management, Space, Food, Manufacturing, Chemicals and Research.

NIS2 vs NIS: Key Changes Explained

1. Expanded Scope: NIS2 encompasses additional sectors deemed critical, such as energy, transport, health, and digital infrastructure, thereby increasing the number of organisations required to adhere to its regulations.
2. Enhanced Security Requirements: Organisations must implement comprehensive risk management measures, including incident handling, supply chain security, and encryption, to mitigate cybersecurity threats effectively. ​
3. Stricter Reporting Obligations: Entities are mandated to report significant incidents to relevant authorities within tighter timeframes, ensuring prompt response and mitigation.​
4. Increased Accountability and Fines: NIS2 introduces more stringent supervisory measures and higher penalties for non-compliance, emphasising the importance of adherence to the directive. ​

What Does NIS2 Mean for UK Businesses?

Even though the UK is not bound by EU legislation, British businesses with operations, clients, or supply chains in the EU must align with NIS2 to maintain compliance and avoid penalties. Additionally, the UK government is reviewing its own cybersecurity regulations, which may introduce similar measures in the near future. ​

Preparing for NIS2

1. Assess Your Exposure – Determine whether your organisation falls within the NIS2 scope and identify any areas of potential non-compliance.
2. Strengthen Cybersecurity Measures – Implement risk management policies, supply chain security checks, and employee training programs.
3. Develop a Response Plan – Ensure you have an effective incident reporting system to meet the new rapid notification requirements.
4. Stay Informed – Monitor regulatory updates in both the EU and UK to stay ahead of cybersecurity compliance obligations.

NIS2 Event – Guidance from Industry Experts

To help business leaders navigate these complex legal changes, Leaf IT is hosting a free exclusive Lunch & Learn event at Dublin Chamber on Thursday, 15th May, bringing together industry experts to break down what NIS2 means for your business and how to achieve compliance. To register, complete the online form by clicking here. 

Why Should You Attend the Event?

Not only will you gain an in-depth understanding of the NIS2 Directive, its impact on your business and insight into whether your current cybersecurity setup is compliant. You will walk away with a complete, actionable roadmap to NIS2 compliance tailored for your sector, backed by real-world insights from IT, and regulatory experts at ConnectWise and Nihon Cyber Defence.

Contact Us for NIS2 Compliance Guidance Today

The NIS2 Directive represents a significant step forward in strengthening cybersecurity across Europe. Leaf IT is committed to guiding our clients through this transition, ensuring they remain secure, compliant, and prepared for the future digital landscape.​ To understand what NIS2 means for your business and for ways to stay ahead please reach out to one of our team by clicking here.

Stay informed with the latest in cybersecurity developments by following our blog and reaching out to our team for personalised support.

With Cybercriminals Moving Faster Than Ever, Businesses  Must Act Quickly To Stay Ahead Of Evolving Threats.

Not only are cybercriminals getting smarter – they’re getting faster. The 2025 Annual SonicWall Cyber Threat Report is available now, and it’s uncovered an unsettling reality: hackers are now using public exploit code within 48 hours of release. Making matters worse is how long it takes organisations to patch critical security flaws.

For businesses and security professionals, this means the window for prevention is shrinking rapidly. Legacy security solutions are no longer enough, businesses must adopt a new mindset to combat modern cyber threats. To stay ahead, businesses need real-time threat intelligence, continuous monitoring and proactive defence strategies.

48 Hours, Meet 3,600 Hours

SonicWall’s data shows that 61% of the time, threat actors are utilising publicly available exploit codes in as little as 48 hours. When you compare that to the 120 to 150 days it takes organisations
to implement patches on average, it starts to paint a frightening picture. That 3,552-hour gap is where the most damage happens – data theft, ransomware, business email compromise (BEC) and
more.

We have some examples, too. In 2024, the LockBit ransomware group exploited a critical JetBrains TeamCity vulnerability (CVE-2024-27198), launching attacks within 24 hours of its disclosure.
Meanwhile, Cl0p ransomware operators used a different critical flaw to breach 66 companies within two days of a PoC release. These aren’t isolated incidents—they’re part of an alarming trend where attackers weaponize vulnerabilities before businesses even know they exist.

Ransomware And BEC: Bigger, Faster And More Costly

Ransomware continues to be a devastating cyber threat, and our threat report shows why. In 2024 alone, ransomware cost businesses an average of $4.91 million per incident when you factor in
downtime, data recovery and ransom payments. And it’s not just ransomware – BEC attacks have surged to account for one-third of all reported cyber insurance claims, as shared with us through our trusted cyber insurance partner, Cysurance. These attacks are becoming more sophisticated, often using AI to craft convincing phishing emails that trick employees into sending money or sensitive data to cybercriminals. With cyber insurance costs skyrocketing, businesses need to double down on prevention rather than waiting to be attacked and spending even more on recovery.

IoT And Cloud Threats Are Escalating

With more connected devices than ever, IoT attacks have spiked by 124%, making unsecured devices an easy entry point for cybercriminals. Meanwhile, cloud-based threats remain a top
concern, with 85% of all actionable security alerts tied to cloud account compromises. As businesses continue their digital transformations, securing IoT devices and cloud environments
must be a top priority.

How Businesses Can Stay Ahead

The speed at which threat actors move today demands an always-on approach to cybersecurity. Here’s what organisations can do right now:

• Reduce the Patching Gap: Implement automated patch management and vulnerability scanning
  to stay ahead of known exploits.
• Leverage 24/7 Threat Monitoring: SonicWall’s SOC services ensure real-time detection and
  response, preventing breaches before they happen.
• Adopt Zero-Trust Security Models: Assume that no one – inside or outside the network –
  should be trusted by default. Strict access controls and continuous monitoring are key.
• Educate Employees on Phishing and BEC Threats: Human error remains a major factor in
  breaches, making security awareness training essential.

The full 2025 SonicWall Cyber Threat Report offers deeper insights into the modern threat landscape as well as details for staying ahead of emerging threats. With cybercriminals operating at
breakneck speeds, businesses can’t afford to play catch-up. The time to act is now.

Get the full report and see the latest cybersecurity trends first-hand.