Fortinet has removed SSL VPN tunnel mode from FortiOS 7.6.3, and an unplanned upgrade can leave remote staff without a connection. Jacques van der Merwe explains why Si Futures is migrating clients to IPsec VPN roughly a year ahead, how running both side by side protects users, and what to check before you upgrade.
Risk Management
What Your Contract Doesn’t Tell You About Your Data
Most businesses only think about their contracts when something goes wrong. Geordie Hogarth on why UK data transfer compliance and GDPR compliance for UK SMEs belong in every agreement.
What Cyber Essentials Taught Us About Security Discipline
A Sunday-night assessor query forced a full resubmission of our Cyber Essentials certification. This piece looks at why rebuilding the evidence properly, rather than patching it, was the only real option.
What To Do When Your Email Account Is Compromised
A quiet email account compromise can run for weeks before anyone notices. This piece walks through the practical, ordered steps that limit damage and stop attackers finding a second way back in.
When Your Vendor Upgrades on Their Schedule, Not Yours
Cloud-hosted security vendors upgrade on their own schedule — your configuration doesn’t always survive the transition. A Fortinet EMS incident this week shows what proactive managed security monitoring looks like when it matters most.
Who Is Checking the AI’s Work?
AI can write code faster than any developer. The question is whether anyone is checking what it actually produced — and whether it is secure, not just functional. Si Futures ran penetration tests against their own services to find out.
The 6am Call: Why Verification Is Your Most Important Security Control
What happens when the 6am standby call sounds completely legitimate — but something still feels wrong? Nicholas Broderick on the verification process that protects MSP engineers and clients when AI voice cloning makes impersonation almost indistinguishable from the real thing.
The Microsoft Change That Will Break Your Office 365 Backups
Microsoft is retiring Exchange Web Services in October 2026 — a backend change that will silently break backup tools, archiving solutions, and integrations still relying on EWS. Find out if your Microsoft 365 backup is at risk and what to do before the deadline.
Your Business Domain: Who Actually Owns It?
Domain security sits in a gap most businesses have never audited. If a contractor registered your domain years ago and the relationship has since ended, you may not control one of the most critical pieces of your infrastructure — including all your business email. This piece explains what that exposure looks like and what to check before it becomes a crisis.
