UK business on alert as calendar phishing scams surge and climate policies divide

The meeting that wasn’t: how calendar phishing became the UK’s fastest-growing cyber threat

A new wave of cyber fraud is exploiting a mundane workplace tool: the digital calendar. Security researchers and corporate IT teams report a surge in "calendar phishing" attacks, where fraudsters inject fake meeting invites into employees’ schedules to steal login credentials. The technique, which first emerged in isolated cases two years ago, has now become one of the most common vectors for corporate data breaches in the UK, according to a recent alert from the National Cyber Security Centre (NCSC).

The scam is deceptively simple. Victims receive an automated calendar invitation—often disguised as a routine project review or contract renewal—containing a link to a spoofed login page for Google, Microsoft, or PayPal. Once credentials are entered, attackers gain access to email accounts, internal documents, and financial systems. "The psychological trigger is powerful," said a spokesperson for the NCSC. "People are conditioned to trust calendar entries, especially when they appear to come from a colleague or a known vendor."

The scale of the problem has caught businesses off guard. A survey of 500 UK companies conducted last month by the British Chambers of Commerce found that 42% had experienced at least one calendar-based phishing attempt in the past six months, with 12% reporting successful breaches. The financial sector has been particularly hard hit, with several high-profile cases involving fraudulent wire transfers initiated after attackers gained access to executive email accounts.

The rise of remote work has exacerbated the vulnerability. "In a hybrid environment, employees are more likely to click on a link in a calendar invite than in an email," said Jane Whitfield, a cybersecurity consultant at PwC. "The lack of face-to-face interaction means people rely more on digital cues, and attackers are exploiting that."

Regulators are taking notice. The Financial Conduct Authority (FCA) has issued guidance urging firms to implement multi-factor authentication for calendar apps and to train staff to verify unexpected meeting requests. However, compliance remains uneven. "Many companies still treat cybersecurity as an IT issue rather than a board-level risk," Whitfield added. "Until that changes, these attacks will continue to succeed."

Climate policy in flux: what UK businesses need to watch after party conferences

The UK’s political parties have sent mixed signals on climate policy in recent weeks, leaving businesses to navigate an increasingly uncertain regulatory landscape. The Conservative Party’s proposal to scrap the Future Homes Standard (FHS)—a set of low-carbon building regulations set to take effect in 2027—has drawn sharp criticism from industry groups and environmental campaigners. Meanwhile, Labour has delayed a decision on new North Sea oil and gas licences, and the Green Party has broken ranks with its traditional anti-nuclear stance by endorsing small modular reactors.

The FHS, which would require new homes to be built with solar panels, heat pumps, and high-grade insulation, has been a point of contention since its announcement in 2023. Kemi Badenoch, the Business Secretary and a leading contender for the Conservative leadership, called the standard "a burden on homebuilders and buyers" during her speech at the party’s annual conference. "We need to prioritise affordability over arbitrary green targets," she said. The policy shift, if implemented, would mark a significant rollback of the UK’s net-zero commitments and could increase household energy bills by an average of £200 per year, according to analysis by the Energy and Climate Intelligence Unit (ECIU).

Labour’s approach has been more cautious. The party has paused its 2024 pledge to block new oil and gas licences, citing "economic realities" and the need for a "just transition" for workers in the sector. Ed Miliband, the Shadow Energy Secretary, told the Financial Times that Labour would not "pull the rug out from under communities that depend on these industries." The delay has disappointed climate activists but has been welcomed by energy firms, which have warned that abrupt policy changes could deter investment.

The Green Party’s endorsement of nuclear energy has also raised eyebrows. In a departure from its long-standing opposition to atomic power, the party’s co-leader, Carla Denyer, argued that small modular reactors could "play a role in a renewable energy mix." The shift reflects a broader debate within the environmental movement about the trade-offs between rapid decarbonisation and the risks of nuclear waste.

For businesses, the policy shifts create a challenging environment. "Companies need clarity to plan long-term investments," said Rain Newton-Smith, chief executive of the Confederation of British Industry (CBI). "The back-and-forth on regulations like the FHS makes it difficult to commit to green infrastructure projects." The uncertainty is particularly acute in the construction and energy sectors, where firms have already begun adapting supply chains and workforce training to meet the FHS requirements.

The political divisions also highlight a growing tension between short-term economic pressures and long-term climate goals. "The cost-of-living crisis has made voters more sensitive to policies that could increase bills, even if the long-term benefits are clear," said Josh Burke, a senior policy fellow at the London School of Economics. "Politicians are struggling to balance those concerns with the need to meet net-zero targets."

Diesel costs squeeze charities and small businesses

Rising diesel prices are putting pressure on UK charities and small businesses, many of which rely on fuel-intensive operations to deliver services. Cancer charity Daft as a Brush, which provides free transport for patients in the North East, has warned that it may have to reduce its fleet of 31 vehicles if prices remain elevated. "We’re seeing a 15% increase in fuel costs compared to last year," said Brian Burnie, the charity’s founder. "That’s money we can’t spend on patient care."

The issue extends beyond the voluntary sector. Teesside Minibus Hire, a family-run business, has raised its prices by 10% to offset fuel costs but fears losing customers to larger competitors with more efficient fleets. "We’re caught between a rock and a hard place," said the company’s owner, who asked not to be named. "If we don’t pass on the costs, we go under. If we do, we risk driving business away."

Diesel prices have climbed steadily since early 2026, driven by global supply constraints and geopolitical tensions in oil-producing regions. The UK’s decision to phase out red diesel subsidies for certain industries in 2023 has also contributed to the squeeze. While the government has introduced temporary relief measures for farmers and hauliers, charities and small businesses have been left to absorb the full impact.

The situation has reignited debates about the UK’s energy transition. "Diesel is still essential for many organisations that can’t easily switch to electric vehicles," said Simon Francis, coordinator of the End Fuel Poverty Coalition. "The government needs to provide targeted support to help them through this period." However, with public finances under strain, such measures seem unlikely in the short term.

For now, businesses and charities are adapting as best they can. Daft as a Brush has launched a fundraising campaign to cover its fuel costs, while Teesside Minibus Hire is exploring partnerships with local councils to secure bulk fuel discounts. "We’re not asking for handouts," said Burnie. "We just need a fair chance to keep doing our work."

What this means for UK business

The past week has underscored three key challenges for UK companies: the growing sophistication of cyber threats, the volatility of climate policy, and the financial pressures facing small businesses and charities. Each of these issues carries significant risks, but also opportunities for firms that can adapt quickly.

On cybersecurity, the rise of calendar phishing highlights the need for businesses to rethink their digital defences. "The best protection is a combination of technology and human awareness," said the NCSC spokesperson. Companies that invest in staff training and multi-factor authentication will be better positioned to fend off attacks.

Climate policy remains a moving target, but businesses can mitigate risk by diversifying their energy strategies and engaging with policymakers. "Firms that take a proactive approach—whether by adopting low-carbon technologies or lobbying for clearer regulations—will be ahead of the curve," said the CBI’s Newton-Smith.

For small businesses and charities, the diesel crisis is a reminder of the fragility of supply chains. Those that can innovate—whether through fuel-efficient vehicles, alternative transport solutions, or cost-sharing partnerships—will be more resilient in the face of future shocks.

The common thread? Uncertainty is the new normal. Companies that build flexibility into their operations, whether through cybersecurity, energy planning, or financial management, will be best equipped to navigate the challenges ahead.