As ever more mobile and IoT devices connect to the internet, the potential for damaging cyberattacks can only increase. As each new technology appears, manufacturers and service providers rush to bring products to market, often without due consideration for security. Inevitably, ‘bad actors’ — including low-level hackers, organised criminals, ‘hacktivists’ and nation states — exploit the resulting vulnerabilities, stealing or compromising data, denying access to services or causing other kinds of cyber-mayhem.