🎃 No tricks, just cybersecurity: a free basic perimeter review until 31 October. Book yours →
🎁 The landline switch-off finishes by 31 January. Is your business ready? Get a switch-off audit →
23 articles
29 July 2026
Phishing emails are the number one way small businesses get breached. Here are the red flags your team should know, with real examples.
28 July 2026
A critical unauthenticated remote code execution chain is being actively exploited against default WordPress installations. If you run WordPress 6.9 or 7.0, update immediately.
21 April 2026
Strip the jargon out. Zero Trust isn't a product you buy. It's three simple principles that any business can apply.
7 April 2026
Most cyber attacks don't exploit software vulnerabilities. They exploit people. Here's what you can actually do about it.
24 March 2026
A single anti-phishing policy deployment revealed nearly 1,000 spoofed emails reaching inboxes unfiltered. Here's what happened.
9 March 2026
Six things you can do right now, for free, that will dramatically reduce your risk of a cyber attack.
28 June 2026
The best cyber security for a UK small business: the 7 tools that actually matter, most of which you already have, and what a good managed cyber security service should include.
8 June 2026
Shared passwords, sticky notes, and 'Password1!' If this sounds familiar, a password manager will change your life for a few pounds a month.
22 May 2026
Cyber Essentials is the UK government's baseline cybersecurity certification. Here's what it involves, what it costs, and whether it's worth it.
14 May 2026
These three protocols stop attackers from sending emails that look like they come from your domain. Here's what they do and how to set them up.
14 April 2026
The first 60 minutes after a breach determine how bad it gets. Here's exactly what to do, and what not to do.
17 February 2026
A cybersecurity policy sounds like a big-company thing. It's actually a two-page document that protects your business and takes an afternoon to write.
15 January 2026
43% of cyber attacks target small businesses. Not because they have valuable data, but because they have weak defences.
10 September 2026
Everything you need to know about Cyber Essentials certification — the five controls, costs, CE vs CE Plus, pass rates, and common reasons businesses fail.
Yes, for most UK government contracts involving sensitive data. Here's exactly which contracts require it, the 2014 mandate, MOD rules, and how to get certified.
26 October 2026
A clear comparison of the two Cyber Essentials certification levels, what each involves, and how to decide which one your business should pursue.
3 October 2026
Lost or replaced your phone and now Microsoft 365 says "Approve sign in request" or "More information required"? Here's how to get back in and stay safe.
Clients say your emails land in junk or spam, or you see "SPF fail" or "DMARC fail" in headers? Here's how to fix Microsoft 365 deliverability properly.
Odd emails sent from you, bounces you didn't send, or "user is restricted from sending email"? Here's what to do when a Microsoft 365 account is hacked.
Seeing "Your account has been locked", AADSTS50053, AADSTS50076 or AADSTS53003 when signing in to Microsoft 365? Here's what each error means and the fix.
23 October 2026
Two critical PHP flaws let attackers take over web servers without logging in. How to tell if your website runs PHP, which versions are fixed, and exactly what to do, in plain English.
A flaw in how Node.js decompresses Brotli data could let attackers run code on servers and apps. Who's affected, the fixed versions, and how to check and update your Node.js apps.
6 November 2026
An email or WhatsApp from the director asks you to buy gift cards for clients, or make an urgent payment before Christmas. It's a scam. How to spot it, what to do if you've already sent the codes, and how to protect your business.
