Cyber 3-2-1: How a social engineer beat £2m of security, why most critical vulnerabilities are not critical, and why you need to worry about disgruntled employees. This week’s action: When someone leaves, disable their access.