⭐100K+ Monthly Downloads

⭐Top 20 Apple Management

⭐100K+ Monthly Downloads ⭐Top 20 Apple Management

The Small

Business

Cyber Security Guy

Welcome to the blog and podcast, where we share brutally honest views, sharp opinions, and lived experience from four decades in the technology trenches. Whether you're here to read or tune in, expect no corporate fluff and no pulled punches.

Everything here is personal. These are my and the team’s thoughts, opinions forged in the heat of battle! And not those of our employers, clients, or any other professional with whom we are associated.

If you’re offended, take it up with us, not them.

What you’ll get here (and on the podcast):

  • Straight-talking advice for small businesses that want to stay secure

  • Honest takes on cybersecurity trends, IT malpractice, and vendor nonsense

  • The occasional rant — and yes, the occasional expletive

  • War stories from the frontlines (names changed to protect the spectacularly guilty)

I've been doing this for over 40 years. I’ve seen genius, idiocy, and everything in between. Some of it makes headlines, and most of it should.

This blog and the podcast are where we break it all down.

Grab a coffee and pull up a chair, you need to see this!

Latest Articles
From Cyber Essentials to SMB1001 — Is One Badge Ever Enough?
From Cyber Essentials to SMB1001 — Is One Badge Ever Enough?
That Cyber Essentials Badge on Your Website: Credential or Creative Writing?
That Cyber Essentials Badge on Your Website: Credential or Creative Writing?
Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message. Stop the Security Industry Bullshit. Wear Your Message.
Stop the Security Industry Bullshit. Wear Your Message.
Threat Intelligence Noel Bradford Threat Intelligence Noel Bradford

Your Developers Are Being Hunted: The Fake Job Interview Malware Campaign Every UK Business Owner Needs to Know About

Microsoft's Defender Experts published research yesterday on a campaign called Contagious Interview. Attackers pose as recruiters, walk your developers through a convincing fake job interview, then get them to clone and run a malicious code repository. The moment they do, your cloud credentials, API tokens, signing keys, and password manager databases are on their way out the door.

This campaign has been running since at least December 2022. Your developers are the target. Your infrastructure is the prize. And the attack is sophisticated enough that even technically sharp people fall for it. Here is what you need to know.

Read More

⚠️ Full Disclaimer

This is my personal blog. The views, opinions, and content shared here are mine and any contributors and ours alone. They do not reflect or represent the views, beliefs, or policies of:

  • Our Day Job employers

  • Any current or past clients, suppliers, or partners

  • Any other organisation We affiliated with in any capacity

Nothing here should be taken as formal advice — legal, technical, financial, or otherwise. If you’re making decisions for your business, always seek professional advice tailored to your situation.

Where we mention products, services, or companies, that’s based purely on our own experiences and opinions — We are not being paid to promote anything. If that ever changes, we’ll make it clear.

In short: This is my personal space to share my personal views. No one else is responsible for what’s written here — so if you have a problem with something, take it up with me, not my employer.