Most businesses put their cybersecurity budget where it's easy to see. Firewalls, antivirus, backup and recovery, all doing exactly what they're built to do.

But none of it stops someone picking up the phone and just asking for what they want.

That's social engineering and it's quietly become the way most successful cyberattacks get in, not through malware sneaking past a firewall, but through one person trusting another at the wrong moment.

July is when most offices start to empty out. Desks sit unused for a week or two at a time, out of office replies go up, and the usual rhythm of who's around and who isn't gets a lot less predictable. For cyber criminals, that's exactly the kind of gap they're looking for.

It's easy to think of summer as a quieter time for the business, but from a security point of view, it can actually be one of the riskier periods of the year. Here's what's worth thinking about before your team heads off.