Detection was never where the time went. Geordie Hogarth explains how Si Futures turned vulnerability management from hours of client-by-client navigation into a single fleet-wide board, and why the question to ask your provider is not “do you scan?” but “show me what you decided, and when.”
Fortinet has removed SSL VPN tunnel mode from FortiOS 7.6.3, and an unplanned upgrade can leave remote staff without a connection. Jacques van der Merwe explains why Si Futures is migrating clients to IPsec VPN roughly a year ahead, how running both side by side protects users, and what to check before you upgrade.
Password managers make strong, unique passwords practical, but their default autofill matching can expose other clients’ logins when you share your screen. Robin Martin explains the single 1Password setting that fixes it, which logins to change first, and why this small habit protects your clients’ privacy as much as your own.
A Sunday-night assessor query forced a full resubmission of our Cyber Essentials certification. This piece looks at why rebuilding the evidence properly, rather than patching it, was the only real option.
Why Good Patch Management Is About More Than Installing Updates Managed Cybersecurity • IT Support...
Cloud-hosted security vendors upgrade on their own schedule — your configuration doesn’t always survive the transition. A Fortinet EMS incident this week shows what proactive managed security monitoring looks like when it matters most.
AI can write code faster than any developer. The question is whether anyone is checking what it actually produced — and whether it is secure, not just functional. Si Futures ran penetration tests against their own services to find out.
What happens when the 6am standby call sounds completely legitimate — but something still feels wrong? Nicholas Broderick on the verification process that protects MSP engineers and clients when AI voice cloning makes impersonation almost indistinguishable from the real thing.
Domain security sits in a gap most businesses have never audited. If a contractor registered your domain years ago and the relationship has since ended, you may not control one of the most critical pieces of your infrastructure — including all your business email. This piece explains what that exposure looks like and what to check before it becomes a crisis.
