A Sunday-night assessor query forced a full resubmission of our Cyber Essentials certification. This piece looks at why rebuilding the evidence properly, rather than patching it, was the only real option.
A quiet email account compromise can run for weeks before anyone notices. This piece walks through the practical, ordered steps that limit damage and stop attackers finding a second way back in.
Why Good Patch Management Is About More Than Installing Updates Managed Cybersecurity • IT Support...
Cloud-hosted security vendors upgrade on their own schedule — your configuration doesn’t always survive the transition. A Fortinet EMS incident this week shows what proactive managed security monitoring looks like when it matters most.
How do you manage firewall threat intelligence when your block lists outgrow the firewall’s limits? Si Futures built a dynamic threat feed to replace static Fortinet address groups — cutting overhead and scaling without limit.
AI can write code faster than any developer. The question is whether anyone is checking what it actually produced — and whether it is secure, not just functional. Si Futures ran penetration tests against their own services to find out.
Most businesses only discover an email authentication problem when something breaks. This post explains how SPF, DKIM and DMARC determine whether your email is trusted — and why getting them right is as much a security decision as a deliverability one.
What happens when the 6am standby call sounds completely legitimate — but something still feels wrong? Nicholas Broderick on the verification process that protects MSP engineers and clients when AI voice cloning makes impersonation almost indistinguishable from the real thing.
Microsoft 365 audit logs retain 180 days of activity — but the compliance portal wasn’t built for serious investigations. Rudie de Vries explains the retention ceiling, bulk extraction via PowerShell, and what happens when the clock runs out mid-investigation.
