IT News Roundup: AI, Cyber Threats & Cloud for UK Businesses

Morning all, and welcome to this week's IT news roundup from the Wavetree team. Whether you're running a business in Cheltenham, Worcester, Swindon, or anywhere else across the UK, there's been plenty going on in the tech world that could affect the way you work, stay secure, and grow. We've pulled out the stories that actually matter for UK businesses and translated them into plain English. No jargon, no scare tactics, just a friendly chat about what's going on and what you might want to do about it.

AI Consultancy Is No Longer Just for Big Business

PwC's 2026 AI Performance Study landed this week, and the headline is hard to ignore: around 75% of the economic gains from AI are being captured by just 20% of companies. In other words, the businesses that plan properly and use AI for growth (not just shaving a few minutes off admin) are pulling sharply ahead. Meanwhile, a Deloitte survey found that 62% of small businesses still haven't adopted AI in any meaningful way.

For UK SMEs, the risk isn't the technology itself, it's getting left behind. Drop-in AI tools for quoting, customer support, scheduling and data analysis are now genuinely affordable and practical. The trick is choosing the right ones and rolling them out without creating a data or compliance headache. That's exactly the kind of thing our AI consultants help with day in, day out, for businesses of every size right across the UK.

Cyber Threats Keep Climbing for UK Businesses

CYBERUK 2026, the UK government's flagship cyber event, is running in Glasgow this week (21-23 April), marking the NCSC's 10th anniversary. The stats coming out of it are sobering: 43% of UK businesses suffered a cyber breach in the last twelve months, rising to 70% for medium-sized firms. The NCSC also confirmed it has dealt with 204 nationally significant incidents in the past year, more than double the previous year.

On top of that, Microsoft disclosed fresh activity from a group it calls Storm-1175, which is exploiting web-facing systems to launch ransomware attacks against healthcare and service businesses in the UK, US and Australia. Vercel also revealed a supply chain attack through compromised OAuth tokens. The common thread? Attackers are using AI to write more convincing phishing emails, find vulnerabilities faster and hit more businesses at once.

Cyber Essentials 2026: What UK Businesses Need to Know

The April 2026 refresh of Cyber Essentials kicks in for any assessment account created after 26-27 April. The big shifts are tighter rules on multi-factor authentication, faster patching timelines, and a much broader definition of what counts as "in scope" for cloud services. If you handle public sector contracts, insurance renewals or supply chain audits, this matters. It's not optional, and ticking the box late often costs more than getting it right first time.

ISO 27001 Certified Protection for Your Data

This is where Wavetree's ISO 27001 certification earns its keep. ISO 27001 is the international gold standard for information security management, and it's audited every year. It means our processes, our people and our hosting environment all follow a formally tested framework. For our clients, that translates into fewer nasty surprises, cleaner audits and real peace of mind.

Microsoft 365, Google Workspace & Apple's New Entrant

A few productivity updates are worth flagging. Microsoft has confirmed a global pricing change taking effect on 1 July 2026, so businesses that renew before then can lock in current rates. Microsoft Loop is also tightening up, now requiring an existing Microsoft 365 Group for any new Loop workspace. Over at Google, items with legacy restricted access are being auto-migrated to the new limited access setting, which is worth checking if you share a lot of files externally.

The more eye-catching news is Apple Business, launched on 14 April in more than 200 countries. It's a free platform bundling email, calendar, directory services and built-in mobile device management. Is it ready to replace Microsoft 365 for most UK businesses? Honestly, not yet, but it's one to watch, and we'll be testing it so our clients don't have to.

Why Local Hosting and Real People Still Matter

With AI-powered attacks rising and cloud misconfiguration blamed for as much as 75% of cloud breaches, it has never been more important to know who is actually looking after your systems. Wavetree runs local hosting from our base in Cheltenham, so your data stays in UK data centres, under UK law, with Gloucestershire hosting infrastructure you can visit if you want to. When you ring us, you speak to a real person you've met before, not a faceless overseas call centre reading from a script.

That combination of local hosting, a dedicated IT support team, and proper ISO 27001 certified processes is what makes a real difference when things get tricky. It's why our clients across Cheltenham, Gloucester, Worcester, Swindon and the wider UK stick with us year after year.

Your Takeaways for the Week

If you take one thing from this week's news, let it be this: AI and cyber threats are both accelerating, and the winners will be the businesses that get both sides right at the same time. Pair a clear AI strategy with ISO 27001 grade security and local hosting, and you're in the top tier. Leave it to chance and you're rolling the dice.

Talk to Wavetree: Local IT Support by Real People

Wavetree provides managed IT support, AI consultancy, local cloud hosting and ISO 27001 certified cybersecurity to businesses across the UK, from our home base in Cheltenham out to Gloucester, Stroud, Tewkesbury, Cirencester, Worcester, Malvern, Evesham, Droitwich, Bromsgrove, Swindon, Chippenham, Trowbridge, Devizes, Marlborough and remote teams across the country. Whether you need AI consultants, a new hosting provider, someone to sort your Cyber Essentials 2026 renewal, or just a friendly IT team that actually picks up the phone, we're here to help. Give us a ring on 01242 820854 or drop us a line through the website and we'll have a proper chat about what's right for your business.