650 articles · Page 15 of 33
DNS security is not an enterprise problem. Cache poisoning and rogue resolvers are actively targeting small businesses right now.
Read more →
61% of organisations were breached through their supply chain last year. Just 7% monitor beyond immediate suppliers. That is a structural failure, not bad luck.
Read more →
Every IT person alive has said it is DNS. Half the time it is nonsense. Here is how to stop wasting hours chasing ghosts.
Read more →
Learn from a UK BEC case study where a property firm lost £12,100. Discover the one free policy that could have stopped it.
Read more →
63% of UK SMBs faced cyber incidents in 2023. Learn how to prepare and protect your business assets effectively.
Read more →
When McDonald's Netherlands embarrassed the entire security industry with one ad, your password policy became the problem. Here is how to fix it.
Read more →
167 CVEs. Two zero-days. One SharePoint flaw needs no password to exploit. April 2026 Patch Tuesday demands your attention today, not next week.
Read more →
A household with refrigerated medication says the paid route delivered a worse practical outcome than the free one, and that the later data request became a dispute of its own.
Read more →
The cyber insurance series is complete. Six posts, one episode. Next week: the Microsoft 365 threat landscape as it actually stands in 2026.
Read more →
Over 40% of UK cyber claims are denied. Not because businesses are fraudulent: because the real product insurers sell is plausible deniability, not coverage.
Read more →
A UK business said yes to MFA on their proposal form. The attack came through servers with no MFA. The policy was voided. Lucy Harper investigates.
Read more →
UK insurers check six specific technical controls after a breach. If they're not in place and documented, your claim is at risk. Here's the practical checklist for UK SMBs.
Read more →
Paste-and-run is now the dominant attack method. Mac is not safe. Vidar is back. Red Canary's March data, translated into steps you can actually take.
Read more →
Attackers are weaponising the same remote access tools your IT team uses. Sophos has the receipts. Here is what happened and what you need to do.
Read more →
Dave configured the servers in 2014 and only Dave knows how they work. Dave is not a solution. Dave is a liability.
Read more →
Your cyber policy probably excludes losses from state-backed attacks. You may not have read that clause. If a nation-state campaign sweeps through your sector, it could void your cover entirely.
Read more →
50,000 WordPress sites exposed by one contact form plugin. CVSS 9.8. No login required. This is not bad luck. This is the WordPress business model.
Read more →
One compromised npm account. Two poisoned packages. 100 million weekly downloads at risk. Who is accountable when open-source governance fails?
Read more →
Two working exploits in one week. One public, one confirmed in the wild. Neither fully patched. Here is what UK SMBs need to do right now.
Read more →
Every answer on your cyber insurance proposal form will be checked against your network logs if you ever claim. Most SMBs answer how they'd like things to be, not how they actually are.
Read more →