182 articles published
Threats
Callback phishing — also called TOAD (Telephone-Oriented Attack Delivery) — is a scam where criminals send a realistic-looking email with a phone number instead of a link, then social-engineer victims over the phone into handing over access or payment. It bypasses email security filters and is growing fast in the UK. Here's how it works and how to defend against it.
15 August 2026
Protect Your Business
Network-attached storage devices from Synology and QNAP are convenient, affordable, and frequently targeted by ransomware. Around 250,000 NAS devices are exposed to the public internet without adequate protection. This guide covers the specific risks, what attackers are after, and the configuration changes that meaningfully reduce your exposure.
14 August 2026
Protect Your Business
Phishing simulation and security awareness training platforms reduce the risk of staff clicking malicious emails by 60–70%. This guide compares KnowBe4, Proofpoint Security Awareness Training, Mimecast Awareness Training, and Hoxhunt for UK small businesses — covering pricing, UK-specific content, phishing simulation quality, and what to look for before you buy.
14 August 2026
Threat Awareness
LLMs have made it trivially easy to write polished, personalised phishing emails at scale. The broken English that made phishing recognisable is gone. Here's what to look for now and how to update your defences for 2026.
13 August 2026
Sector Guides
Letting agents handle client money, tenant PII, and high-value payment flows — making them a specific target for mandate fraud, email account takeover, and ransomware. Here's the threat picture and what to prioritise.
13 August 2026
Sector Guides
Nurseries and childcare businesses handle sensitive data about children and families — yet most operate without any formal cybersecurity protections. Here's what you actually need to do.
12 August 2026
Financial Security
Authorised push payment fraud — where criminals trick businesses into sending money to fraudulent accounts — cost UK businesses hundreds of millions in 2025. New mandatory reimbursement rules changed how banks respond, but prevention is far better than claiming back.
11 August 2026
Cloud Security
Exposed S3 buckets, publicly readable Azure storage, and overpermissioned cloud accounts are behind a significant proportion of data breaches — and most small businesses have no idea their cloud setup is insecure. Here's what to check.
11 August 2026
Data Security
Shadow IT — staff using personal apps and tools for work without IT approval — is one of the most common data loss vectors in small businesses. Here's what it looks like, why it happens, and how to get it under control without banning everything useful.
11 August 2026
Cyber Threats
The NCSC's CTO flagged prompt injection attacks in its week-ending August 9 summary, following incidents involving frontier AI systems. Here's what prompt injection is, why it matters for businesses using AI tools, and what you can actually do about it.
10 August 2026
Compliance
A stolen laptop containing personal data triggers mandatory GDPR reporting obligations for UK businesses. Here's exactly what you must do, what you must report to the ICO, and how encryption can change your obligations entirely.
9 August 2026
Malware
Criminals are distributing malicious software disguised as free AI tools — fake ChatGPT apps, AI image generators, and productivity assistants. Once installed, they steal passwords, session tokens, and business files. Here's what to look for and how to protect your business.
9 August 2026
Threats & Incidents
The UK government's Cyber Security Breaches Survey 2025/2026 found that 612,000 UK businesses were breached in the past year. For small businesses, the figure is 46% — and revenue impact is doubling. Here's what the survey found and the five things every SME should do about it.
9 August 2026
Incident Response
Finding out your business website has been compromised is stressful, but the steps to recover are straightforward if you know them. This guide covers how to identify what happened, contain the damage, clean up, and stop it happening again — without needing a technical background.
8 August 2026
Sector Guides
Hair and beauty salons hold customer contact details, booking history, and card payment data — and most have almost no cybersecurity in place. This guide covers the specific risks facing salons, what to prioritise, and what you can do this week without technical knowledge.
8 August 2026
Fraud Prevention
Fraud attempts against small businesses spike during the run-up to Christmas and end-of-year accounting periods. August is the right time to put the protections in place before you're busy, stressed, and more likely to make a mistake.
6 August 2026
Security Tools
A practical guide to MDM solutions for UK SMBs — covering Microsoft Intune, Jamf, and simpler alternatives, with guidance on what you actually need vs. what's overkill.
6 August 2026
Incident Response
Getting hit by ransomware is not the end. This guide walks through the immediate steps, who to call, whether to pay, how to restore from backups, and how to avoid the same attack twice.
6 August 2026
Data Protection
Under UK GDPR, anyone can ask your business for a copy of their personal data. You have 30 days to respond. Here's exactly how to handle it — including what you must share, what you can withhold, and what the ICO expects.
6 August 2026
Authentication
MFA notification bombing is being used against UK SMEs to bypass two-factor authentication. Here's how it works, why it's effective, and what actually stops it.
5 August 2026
Fraud & Scams
AI-generated voice cloning lets fraudsters impersonate your CEO, accountant, or supplier in real-time phone calls. Small businesses are the main target. Here's how the scam works and how to stop it.
4 August 2026
Sector Guides
Gyms and sports clubs handle member payment data, personal health information, and CCTV footage that make them targets for cyber criminals. Here's a practical security guide for fitness businesses without a dedicated IT team.
4 August 2026
Sector Guides
Restaurants and hospitality businesses hold payment data, staff records, and booking information that make them soft targets for cyber criminals. A practical guide for UK food and drink businesses without an IT team.
4 August 2026
Sector Guides
UK hospitality businesses are prime targets for cybercrime — here's how to protect your payments, your guest data, and your reputation without a dedicated IT team.
3 August 2026
Fraud Prevention
A practical guide for UK small business owners on authorised push payment fraud, account takeover attacks, what your bank will and won't cover, and the steps that actually reduce your risk.
3 August 2026
Protect Your Business
How to roll out passkeys across Microsoft 365, Google Workspace, and key web apps -- and why your 10-50 person business should be doing it now.
30 July 2026
Getting Started
Most cybersecurity guidance assumes you already have systems in place. This checklist is for the first 90 days of a new UK business — the practical steps to set up secure foundations before bad habits become expensive problems.
29 July 2026
Security Practices
Every time you hire someone, you're adding a new potential entry point for cyber criminals. This checklist covers everything UK small businesses should set up — and restrict — when a new person joins.
28 July 2026
Guides
The UK government's Cyber Security and Resilience Bill is working through Parliament in 2026. It expands the scope of NIS regulations, introduces new incident reporting requirements, and extends duties to managed service providers and supply chains. Here's what small businesses should expect.
28 July 2026
Security Practices
Cyber insurance policies have conditions you need to meet before you're covered. Many UK small business claims are rejected because of gaps in basic security practice. Here's what insurers actually check.
28 July 2026
NCSC Resources
The NCSC launched a free cyber consultation programme in July 2026, giving UK small businesses access to 30-minute one-to-one sessions with qualified Cyber Advisors. Here's what to expect and how to get the most out of it.
27 July 2026
Guides
Microsoft stopped providing free security updates for Windows 10 on 14 October 2025. Millions of UK small businesses are still running it in mid-2026. Here's what that actually means for your security, what Microsoft is offering in the interim, and what your real options are.
27 July 2026
Guides
UK charities hold valuable donor data, sensitive beneficiary records, and often have limited IT budgets and volunteer-dependent workforces — making them attractive targets for fraud and ransomware. This guide covers the specific threats charities face and the free and low-cost tools available.
26 July 2026
Guides
Attackers know that July and August mean reduced staff, slower incident response, and distracted teams. This guide covers what to check before the holidays and how to keep your small business protected when running on a skeleton crew.
26 July 2026
Guides
The UK Cyber Security and Resilience Bill cleared the Commons on 25 June 2026 and is now in the Lords. Supply chain provisions mean SMEs supplying regulated clients face new security obligations — here's what to expect and what to do now.
26 July 2026
Practical Security
Conditional Access in Microsoft 365 lets you enforce MFA, block legacy authentication, and restrict access by device compliance or location — without complex infrastructure. Here's what it is, what licence you need, and which policies to turn on first.
25 July 2026
Regulation
The UK's Cyber Security and Resilience Bill will expand the scope of cyber regulations beyond critical infrastructure to cover more businesses and their suppliers. Here's a plain-English breakdown of what's changing and whether your business is likely to be affected.
25 July 2026
Fraud Prevention
Fraudsters are using AI tools to create convincing fake contracts, invoices, and legal documents. Here's how to spot them, what UK small businesses are most at risk, and the practical steps to protect yourself.
24 July 2026
Fraud Prevention
The PSR's mandatory APP fraud reimbursement regime is now live — but the rules are more nuanced than the headlines suggest, especially if you're a business rather than a consumer. Here's what UK SMEs need to understand.
24 July 2026
Threats & Attacks
Ransomware attackers are now using AI to personalise phishing lures, identify high-value targets, and automate lateral movement. UK SMEs are being hit harder than ever. Here's what's different and what to do about it.
23 July 2026
Threats & Scams
Business email compromise is one of the most financially damaging cyber attacks targeting UK small businesses. Here's how the scam works, why it's so effective, and what you can actually do to stop it.
23 July 2026
Emerging Threats
Fraudsters are using AI voice cloning to impersonate business owners, directors, and suppliers in phone calls to employees. Here's how the attacks work, the warning signs, and practical steps to protect your business.
22 July 2026
Rural Business Security
Farm management software, precision agriculture systems, and rural payment portals have made UK agricultural businesses bigger targets for cybercrime. Here's a practical guide to the risks and how to manage them.
22 July 2026
Industry Guides
Venues, promoters, ticketing platforms, and event production companies handle high-value payment data, large customer databases, and time-critical operational systems that make them attractive targets. This guide covers the specific cyber risks facing UK events and entertainment businesses and the practical steps to address them.
21 July 2026
NCSC & Regulation
The National Cyber Security Centre launched free 30-minute one-to-one cyber security consultations for UK small businesses in July 2026. Here's what they cover and how to access one.
21 July 2026
Fraud Prevention
Fraudsters are using AI to create perfect-looking fake invoices, clone supplier voices, and deepfake video calls. UK businesses lost £49 million to invoice fraud in 2024. Here's what to watch for and how to protect your payments.
20 July 2026
Business Security
Running a holiday let or B&B means handling personal data, managing booking platform accounts, and providing guest Wi-Fi — all of which create cybersecurity risks most accommodation owners haven't considered. Here's what you need to know.
19 July 2026
Online Security
Cybercriminals are claiming, editing, and redirecting legitimate Google Business Profiles to steal customers, intercept calls, and commit fraud. Small businesses are the primary target. Here's how the attacks work and what you can do to lock down your listing.
19 July 2026
AI Security
Microsoft 365 Copilot can access emails, documents, Teams messages, and SharePoint — which is exactly what makes it useful, and exactly what creates new security risks. Here's what UK small businesses need to understand before enabling it.
18 July 2026
NCSC Guidance
The NCSC and DSIT have launched a fresh cybersecurity push aimed at UK small businesses as ransomware and AI-powered phishing surge. Here's what the campaign is telling you to do, and why it actually makes sense.
18 July 2026
Data Privacy
Otter.ai, Fireflies.ai, and Microsoft Copilot recording features are useful tools — but they record confidential client conversations and store data on overseas servers. Here's what UK small businesses need to consider before using them.
17 July 2026
Professional Services Security
UK estate agents are prime targets for property fraud and business email compromise. Here's what to prioritise to protect client money, sensitive personal data, and your agency's reputation.
17 July 2026
Professional Services Security
Accountants and bookkeepers hold some of the most sensitive data that exists — client financials, payroll records, tax filings. Here's the practical security guide for UK accounting practices.
17 July 2026
Protect Your Business
Formjacking attacks inject malicious JavaScript into checkout pages to steal payment card details in real time. Here's what Magecart is, how these attacks work, and the practical steps UK small businesses can take to protect their customers.
16 July 2026
Protect Your Business
Attackers are stealing browser session cookies to take over business accounts after authentication — bypassing MFA entirely. Here's how session hijacking works, which services are most at risk, and how UK small businesses can protect themselves.
16 July 2026
Business Resilience
A business continuity plan helps you keep operating when something goes wrong — a cyber attack, a supplier failure, a flood, or a key employee leaving. Here's how to build one that's actually useful rather than a document that sits in a drawer.
15 July 2026
Certifications
Cyber Essentials is the UK government-backed security certification for businesses of all sizes. This guide explains what it covers, the difference between Cyber Essentials and Cyber Essentials Plus, how to prepare, and when it's worth getting certified.
15 July 2026
Data Privacy
UK small businesses are using AI tools for everything from drafting emails to analysing customer data — but most aren't thinking about the GDPR obligations that come with it. Here's what data minimisation means in practice when AI is involved.
14 July 2026
Regulatory Compliance
The Product Security and Telecommunications Infrastructure Act 2022 has been in force since April 2024. If your small business manufactures, imports, or distributes smart devices in the UK -- from smart speakers to baby monitors to routers -- you have legal obligations under it. Here's what's required and what the penalties look like.
14 July 2026
Sector Guides
UK law firms are high-value ransomware and mandate fraud targets. Solicitors hold privileged client communications, deal in large financial transactions, and work under SRA professional conduct obligations that extend to data security. Here's what good looks like — and what the regulator expects.
12 July 2026
Threats & Scams
Gift card fraud is one of the simplest and most effective scams hitting UK small businesses. An attacker impersonates a director and asks a staff member to buy gift cards urgently. The cards are redeemed before anyone realises. Here's how it works and how to stop it.
12 July 2026
Threats & Attacks
The NCSC has warned in July 2026 that hostile states are actively targeting UK SMEs as entry points into larger supply chains. Small businesses aren't the end goal — they're the stepping stone. Understanding the threat and the practical mitigations is now a business survival issue.
12 July 2026
Threats & Attacks
QR code phishing — quishing — has become a significant business email threat because it moves the malicious link off-screen and defeats URL scanning. Here's how the attacks work, why traditional email security misses them, and what small businesses can do about it.
12 July 2026
Security Policies
Employees using personal phones and laptops for work is convenient but creates real security risks. Here's how to write a BYOD policy, what technical controls you can realistically apply, and where the legal lines are for UK small businesses.
10 July 2026
Security Tools
Cloudflare Zero Trust offers a free tier covering up to 50 users that includes secure remote access, DNS filtering, and browser isolation — capabilities that would cost thousands annually from enterprise vendors. Here's what you actually get, how to set it up, and what the limits are.
10 July 2026
Certifications
Cyber Essentials Plus costs more and takes longer than basic Cyber Essentials, but for government suppliers and NHS contractors it's often mandatory. Here's what the extra assessment actually involves and when it's worth doing.
10 July 2026
Mobile Security
Coffee shops, hotels, airports, and client sites all present different cyber security risks for staff working away from the office. This guide covers the real threats, practical protections, and what a sensible policy for mobile working actually looks like.
10 July 2026
Malware & Threats
Cryptojacking is the unauthorised use of your computers, servers, or cloud accounts to mine cryptocurrency. It doesn't steal your data, but it drains compute resources, inflates cloud bills, and often signals a broader compromise. Here's what UK small businesses should know.
9 July 2026
Phishing & Fraud
QR code phishing — quishing — bypasses email security filters by hiding malicious URLs inside images. UK small businesses are being targeted through fake parking payment QR codes, fraudulent supplier invoices, and compromised printed materials. Here's how to spot it and what to do.
9 July 2026
Incident Response
A work laptop going missing is a potential data breach, not just an insurance claim. This guide walks through what to do in the first 24 hours — from remote wipe to ICO reporting — and what to put in place now so you're ready if it happens.
8 July 2026
Sector Guides
The legal sector saw a 77% surge in cyberattacks in 2025. Law firms hold client funds, sensitive personal data, and privileged communications — making them high-value targets. Here's what UK solicitors and small practices need to do.
7 July 2026
Phishing & Social Engineering
Attackers are using Microsoft Teams to impersonate IT support and company executives — bypassing your email filters entirely. This guide explains how Teams phishing works and what small businesses can do to protect their staff without a dedicated IT team.
7 July 2026
Network Security
Separating your office network into zones — staff devices, guest Wi-Fi, IoT devices, and payment systems — limits how far an attacker can move after a breach. This guide explains how to set up VLANs on a small business network without enterprise IT resources, covering Ubiquiti, Netgear, and consumer-grade managed switches.
7 July 2026
Sector Guides
30% of UK charities experienced a cyber breach or attack in 2025/26. Here's what makes charities particularly vulnerable and what the NCSC, ICO, and basic good practice says you should do about it.
6 July 2026
Industry Guides
Accountancy practices hold bank account details, payroll records, and tax data for dozens or hundreds of clients — making them high-value targets for mandate fraud, credential theft, and ransomware. Here's what UK accountants and bookkeepers need to do to protect themselves and their clients.
5 July 2026
Guides
Law firms, accountants, and consultancies hold high-value client data and face specific regulatory obligations. Here's what the threat landscape looks like and what good security practice looks like for UK professional services businesses.
4 July 2026
Industry Guides
Accountancy firms and bookkeepers handle financial data that criminals specifically target — payroll details, bank credentials, tax records, and HMRC login access. Here's the practical guide to protecting your practice without a dedicated IT team.
4 July 2026
Industry Guides
Healthcare SMEs hold some of the most sensitive personal data in existence and face ransomware groups that specifically target medical records. Here's the practical security guide for dental practices, GP surgeries, and private clinics operating in the UK in 2026.
4 July 2026
Guides
Slack has become a central hub for business communication, which makes it a target for account takeover, data exfiltration, and social engineering. Here's how to lock down your workspace without needing an IT department.
4 July 2026
Social Engineering
Attackers are impersonating managed IT service providers to get inside small business systems — using real company names, spoofed email addresses, and convincing technical scripts. Here's what the attack looks like and how to shut it down.
3 July 2026
Cybersecurity News
The DSIT Cyber Security Breaches Survey 2026 is out, and the picture for UK small businesses is mixed — breaches are more common, but a concerning number of SMEs still lack basic controls. Here's what the findings mean in practice.
3 July 2026
Network Security
Outdated routers are now one of the most common entry points for attackers targeting UK small businesses — the AryStinger botnet alone has enrolled over 4,000 business routers into its attack infrastructure without the owners knowing.
2 July 2026
Threat Landscape
The DSIT and NCSC's annual Cyber Security Breaches Survey is the most reliable snapshot of UK small business cyber risk. The 2026 findings show breaches are up, AI attacks are rising, and most SMEs still have significant gaps in basic controls.
2 July 2026
Industry Guides
Electricians, plumbers, builders, and construction firms are increasingly targeted by invoice fraud, phishing, and account takeovers — here's what to do about it without a dedicated IT team.
1 July 2026
Threats
Cybercriminals don't always come through your email. USB drop attacks, tailgating, and visitor-based threats target the physical environment of your business. Here's what these attacks look like and the practical steps to protect against them.
1 July 2026
Incident Response
A supplier or partner breach can expose your data and systems even when you've done everything right. Here's what to do in the first 48 hours and how to reduce the damage.
30 June 2026
Guides
Your MSP has admin access to your entire IT environment. Here's how to evaluate their security posture before handing over the keys — and what to put in the contract.
29 June 2026
Threat Guides
The NCSC's June 2026 open letter to business leaders warns that AI is accelerating cyberattacks faster than most organisations are prepared for. Here's what it actually means for small businesses and the practical steps to take.
29 June 2026
Threat Guides
The UK's OFSI has sanctioned individuals involved in North Korean IT worker schemes targeting British employers. Small businesses are now primary targets — particularly those with 5 or fewer employees. Here's how the scheme works, how to spot fake candidates, and what to do if you've already hired one.
29 June 2026
Scam Prevention
Action Fraud recorded over 360,000 online shopping fraud cases in a single year. UK small businesses selling on eBay, Amazon, and Etsy face account hijacking, chargeback fraud, and sophisticated impersonation scams.
28 June 2026
Payment Security
PoS systems are a prime target for cybercriminals. This guide covers the common attacks on card payment systems, what PCI DSS means in practice for small businesses, and the steps that actually protect your customers' card data.
27 June 2026
Communication Security
Choosing the right messaging app matters more than most small businesses realise. Here's an honest comparison of Signal, WhatsApp Business, and Microsoft Teams for UK SMEs, covering encryption, GDPR, admin controls, and what you actually need.
27 June 2026
Scam Prevention
Tech support fraud is one of the most common cyber threats to UK small businesses. This guide explains the scam tactics, how remote access fraud works, and what to do if someone's already been given access.
27 June 2026
Account Security
Credential stuffing uses leaked username and password combinations from previous data breaches to break into accounts at scale. UK small businesses are frequently targeted. Here's how it works and what actually stops it.
26 June 2026
Threat Awareness
You don't need a £50,000 threat intel platform to understand what's targeting your business. This guide covers free and low-cost threat intelligence sources available to UK small businesses, and how to turn them into actionable steps.
25 June 2026
Network Security
Distributed denial-of-service attacks hit small businesses too, often as extortion or competitive disruption. This plain-English guide explains what DDoS is, how to spot one, and how to protect your business.
25 June 2026
Getting Started
Sole traders and freelancers face real cyber risks but often assume security measures are only for bigger businesses. Here's what actually matters if you're working for yourself in the UK.
24 June 2026
Social Media Security
LinkedIn accounts are targeted for BEC fraud, fake job scams, and company data theft. This guide covers the specific threats facing UK small businesses and sole traders on LinkedIn, and the settings that actually help.
24 June 2026
Fraud Prevention
Mandate fraud — where criminals impersonate suppliers or utilities to redirect your regular payments to a fraudulent account — is one of the most underreported business scams in the UK. Here's how it works and how to stop it.
24 June 2026
Online Security
Fraudsters are exploiting Companies House records to file fake director appointments, hijack registered addresses, and impersonate legitimate UK businesses — and most owners don't realise it until the damage is done.
23 June 2026
Online Security
Scammers routinely claim ownership of Google Business Profiles belonging to local UK businesses, redirecting customer calls, editing opening hours, posting fake reviews, and sending enquiries to themselves. Here's how it works, how to check if it's happened to you, and how to lock down your listing.
23 June 2026
Account Security
Attackers are draining Google Ads accounts overnight, often bypassing two-factor authentication. Here's how the scam works and what you can do to protect your advertising spend.
22 June 2026
Access Control
Most cyber guidance for small businesses focuses on external attackers. But some of the most damaging incidents come from people who already have access — current and former employees, contractors, and partners. Here's what to do about it.
22 June 2026
Phishing
Browser-in-the-Browser (BitB) attacks create convincing fake login popups that look indistinguishable from real browser windows — even to security-aware users. Here's how the attack works and what you can do to protect your team.
21 June 2026
Security Testing
Penetration testing sounds like enterprise territory, but a growing number of UK small businesses are finding it's both accessible and genuinely useful — especially if you handle customer data, take card payments, or work in a regulated sector.
21 June 2026
Network Security
Business CCTV cameras are one of the most commonly compromised devices on UK small business networks. Default passwords, unpatched firmware, and cloud-connected cameras with no network separation create risks that go beyond the cameras themselves.
19 June 2026
Threat Library
A dataset containing VPN credentials for 73,932 Fortinet FortiGate devices was published on 17 June 2026. If your business uses Fortinet VPN, there are specific actions you need to take today.
19 June 2026
Account Security
Every time someone clicks 'Connect with Google' or 'Sign in with Microsoft', a third-party app gets ongoing access to your business data. Here's how to see everything that's connected to your accounts and revoke what shouldn't be there.
19 June 2026
Phishing & Social Engineering
SMS phishing — smishing — has become a significant threat to UK small businesses. Fake HMRC notices, delivery firm alerts, and bank fraud texts are targeting business owners and staff directly on their phones. Here's what's happening and what to do about it.
19 June 2026
NCSC Guidance
The NCSC has warned UK organisations about elevated cyber risk following conflict in the Middle East, with Iran-linked groups identified as a specific threat. Here are the seven actions the NCSC recommends small businesses take immediately.
18 June 2026
Best Practices
When a laptop or phone leaves your business, your data might go with it — unless you've wiped it properly. A practical guide to secure device disposal, data destruction, and NCSC-aligned best practice for UK small businesses.
18 June 2026
Incident Response
If your business has been hit by a cyber attack, fraud, or scam, Action Fraud is the UK's national reporting centre. Here's exactly how to report, what to include, and what happens next.
17 June 2026
Phishing & Social Engineering
Attackers have found a way around multi-factor authentication that doesn't require cracking it — they just flood you with approval requests until you tap yes. Here's what it is and how to stop it.
17 June 2026
Ransomware
Ransomware groups aren't just encrypting files anymore — they're stealing your data first and threatening to publish it. Here's what double extortion means for UK SMEs, what to do if it happens to you, and how to reduce your exposure.
16 June 2026
Cloud Security
Most small businesses are using AI tools without understanding what happens to the data they type in. Some configurations send your data for model training. Others store conversations indefinitely. Here's what you actually need to know before typing anything sensitive.
15 June 2026
Phishing and Social Engineering
Malvertising — malicious adverts served through legitimate ad networks — is one of the fastest-growing attack vectors hitting UK small businesses. Your staff can pick up malware just by loading a news page. Here's how it works and what to do about it.
15 June 2026
Protect Your Business
A leaver with active accounts is one of the most common causes of data breaches in small businesses — and usually entirely preventable. This checklist covers everything you need to do on an employee's last day and the day after.
15 June 2026
UK Compliance
Most UK businesses that process personal data must pay the ICO's annual data protection fee — but the rules about who needs to register, how much they pay, and what happens if they don't are widely misunderstood.
13 June 2026
Security Basics
WhatsApp Business is now a primary communication channel for millions of UK small businesses. But account takeovers, verification scams, and customer data risks are real threats that most businesses don't prepare for.
13 June 2026
Phishing & Social Engineering
Business email compromise is one of the most financially damaging cyber threats facing UK SMEs — here's how the attacks work, why they're succeeding, and what actually stops them.
12 June 2026
Protect Your Business
Dark web monitoring services alert you when your business email credentials or customer data appear in breach dumps. Here's what they actually detect, what they miss, and whether a small business should bother.
12 June 2026
Tools & Software
Video calls have replaced email for sensitive conversations in most small businesses — but the default settings on Zoom, Microsoft Teams, and Google Meet leave doors open. Here's what to lock down.
12 June 2026
Data Protection
Dark web monitoring services scan breach databases and criminal forums for your business credentials and data. Here's what they actually find, which tools are worth using, and what to do when you get an alert.
11 June 2026
Emerging Threats
Quantum computers will eventually break the encryption protecting your data. The NCSC says UK businesses should start preparing now — but what does that actually mean for a small business in 2026?
11 June 2026
Office Security
Printers, scanners, and multifunction devices sit on your network, store documents internally, and rarely get patched. Here's why they're a serious security liability — and what you can do about it without spending a fortune.
10 June 2026
Practical Security
Most successful cyberattacks exploit vulnerabilities that already had patches available. For small businesses, a simple, consistent approach to software updates is one of the most effective security measures you can put in place — and it doesn't require a dedicated IT team.
9 June 2026
Brand Protection
Attackers register domains that look like yours — one letter off, a hyphen added, a different TLD — to intercept customers, impersonate your brand, and phish your employees. Here's how to spot it, respond to it, and reduce the risk.
9 June 2026
Microsoft 365 Security
Attackers are increasingly using Microsoft Teams as a delivery channel — for phishing links, malicious files, and social engineering impersonating vendors or IT support. For small businesses using Teams, a handful of admin settings and user habits make the difference between Teams being a liability or a secure collaboration tool.
7 June 2026
Payment Security
PCI DSS compliance sounds intimidating but most small UK businesses using Stripe, PayPal, or a card terminal have a much simpler path than they realise. SAQ A covers fully outsourced payment processing and takes under an hour. Here's which SAQ applies to your setup, what it actually requires, and what happens if you don't comply.
7 June 2026
Network Security
Remote Desktop Protocol is one of the most attacked services on the internet. If your Windows servers or workstations have RDP exposed, here's how to secure it — or replace it with something safer.
6 June 2026
Cloud Security
Most small business data breaches involving file sharing come not from being hacked but from misconfigured sharing settings — links set to 'anyone with the link' left in email signatures, folders shared with ex-employees, or cloud accounts with no MFA. This guide covers the security controls that matter most in each platform and the simple habits that keep shared files out of the wrong hands.
6 June 2026
UK Cyber Policy
The government is urging UK businesses to sign up to the Cyber Resilience Pledge, a three-action commitment covering board accountability, NCSC Early Warning Service, and Cyber Essentials. Here's what it actually involves and whether it's worth doing for a small business.
6 June 2026
Network Security
VPNs are marketed as a privacy cure-all, but most small businesses either misunderstand what they do or use them in ways that create a false sense of security. This guide explains what a VPN actually does, when you need one, and the alternatives that often protect you better.
6 June 2026
Phishing
HMRC is the most impersonated organisation in UK phishing campaigns. This guide covers what fake HMRC messages look like, how to tell them from the real thing, and what to do if you or an employee receives one.
5 June 2026
Threat Awareness
Browser extensions with millions of downloads are being used to silently steal passwords, session cookies, and business account access. This plain-English guide explains how the threat works, which types of extensions are highest risk, and what your business can do about it.
5 June 2026
Cyber Awareness
Before attacking a business, threat actors gather information using freely available tools and sources — company registrations, LinkedIn profiles, DNS records, leaked credentials, and more. Understanding what's visible from the outside helps you reduce your attack surface before someone exploits it.
4 June 2026
Website Security
WordPress powers around 40% of all websites — which makes it the most targeted website platform by attackers. Most small business WordPress sites are compromised through a handful of preventable vulnerabilities. Here's what actually needs doing.
4 June 2026
Email Security
SPF, DKIM, and DMARC are three DNS records that stop scammers from sending emails that look like they came from your domain. Here's what they do and how to set them up — even if you've never touched DNS before.
3 June 2026
Cyber Threats
Instagram, Facebook, and TikTok business accounts are being hijacked at scale in the UK — often through phishing, compromised personal accounts linked to the business page, or Meta's own impersonation reports. Here's what happens, why recovery is so difficult, and how to prevent it.
3 June 2026
Account Security
Cloud accounting platforms hold your bank details, payroll records, and supplier accounts — and attackers know it. Here's what's being targeted and the specific settings that stop the most common attacks.
2 June 2026
Phishing & Email Threats
Generative AI is letting criminals write hyper-personalised phishing emails that reference your real customers, invoices, and staff. Here's what's changed and what to do about it.
1 June 2026
Protective Measures
Criminals can steal your business website domain — and it's easier than you think. A practical guide for UK small businesses on protecting your domain registration and DNS records.
1 June 2026
Fraud Prevention
Invoice redirect fraud and supplier impersonation are among the most financially damaging cyber attacks on UK small businesses. A practical guide to recognising and preventing these scams.
1 June 2026
Data Protection
The ICO is stepping up enforcement against small businesses that lack documented data protection processes — here's what you actually need to have in place, explained without the legal jargon.
31 May 2026
E-commerce Security
If you run a Shopify or WooCommerce store, customer card data, addresses, and order history make you a target. Here's what actually matters for e-commerce security without needing technical expertise.
30 May 2026
Account Security
SIM swapping lets attackers bypass SMS two-factor authentication by transferring your phone number to a SIM they control. UK small businesses are increasingly targeted because business accounts often have weaker verification processes than personal accounts. Here's how it works and how to defend against it.
30 May 2026
Preventive Security
DNS filtering stops malware, ransomware, and phishing attempts before they can reach your devices -- and several excellent options are free or cost just a few pounds per user per month. Here's what it is, how it works, and how to set it up.
29 May 2026
Device Security
Phones and tablets are how most small business staff work now -- but mobile security is often an afterthought. Here's the NCSC-aligned guidance that'll actually make a difference.
29 May 2026
Protect Your Business
Passkeys eliminate the password -- and the phishing risk that comes with it. Here's what passkeys actually are, which business accounts support them, and a practical rollout plan for small teams.
28 May 2026
Threat Awareness
Supply chain attacks through software tools and developer dependencies are hitting businesses of all sizes. Here's what they are, why the risk is rising, and the practical steps smaller organisations can take to reduce exposure.
28 May 2026
AI Security
ChatGPT, Copilot, and Gemini are now standard tools in most small businesses. But staff are routinely sharing data they shouldn't. Here's what to watch for and how to set sensible guardrails.
27 May 2026
UK Cyber Guidance
The NCSC has published a free Cyber Action Toolkit aimed at small businesses and sole traders. Here's what's in it, how to use it, and whether it's worth your time.
27 May 2026
Threat Library
The NCSC's latest assessment confirms AI is now used in the majority of sophisticated UK cyberattacks, with ransomware demands up significantly year on year. Here's what that means for small businesses and what you can do about it without a big IT budget.
26 May 2026
Business Security
Millions of small businesses run on Google Workspace. Most of them are using default settings that leave them exposed to account takeover, data leaks, and phishing attacks. Here's what to fix in the Admin Console today.
26 May 2026
Certifications
Cyber Essentials is the UK government's baseline cybersecurity standard. It costs from £330+VAT, takes a few days to prepare, and comes with free cyber insurance. Here's what it actually involves and whether it makes sense for your business.
25 May 2026
Phishing
Criminals are hiding phishing links inside QR codes to bypass email security filters. Attacks are up sharply in 2025–26, and small businesses are a prime target. Here's how quishing works and what to do about it.
25 May 2026
Email Security
A plain-English guide to setting up SPF, DKIM, and DMARC for your business domain -- what each does, how to configure them, how to check your current setup, and why it matters for both security and email deliverability.
23 May 2026
Protect Your Business
Most small businesses use Microsoft 365 with default settings that leave them exposed. These 10 security configurations cost nothing extra to turn on and protect against the most common attacks targeting SMBs.
23 May 2026
Emerging Threats
AI-generated video fraud has moved beyond boardroom scams and is now hitting UK SMEs. Here's how the attacks work, what to watch for, and how to protect your business.
22 May 2026
Incident Response
The NCSC has expanded its Cyber Incident Response scheme to cover smaller organisations. Here's what UK small businesses need to know about getting certified help when things go wrong.
22 May 2026
Emerging Threats
AI-generated voice fraud is hitting UK SMEs hard in 2026. Here's how the scams work, what to watch for, and how to protect your business without spending a fortune.
21 May 2026
Protect Your Business
Zero trust security for small businesses means verifying every user and device every time -- here's what it means in plain English and how to implement it affordably.
18 May 2026
Network Security
A practical business wifi security guide for small business owners. Learn how VLANs, WPA3, and guest network segmentation protect your data from eavesdropping and rogue devices -- no technical degree required.
12 May 2026
Incident Response
A step-by-step incident response guide for small business owners -- written for the moment you realise something's wrong.
5 May 2026
Risk Management
Vendor risk management for small business doesn't require a procurement department. This guide gives you a practical supplier assessment checklist, risk tiering model, and offboarding process to protect your data.
29 April 2026
Protect Your Business
Social engineering attacks exploit human psychology, not technology -- this guide covers pretexting, vishing, and tailgating, and how to build a small business culture that resists them.
22 April 2026
Network Security
Compare the top firewall options for small businesses in 2026. We break down Sophos XGS, Fortinet FortiGate 40F, and pfSense Plus by cost, ease of use, and features so you can make the right choice.
16 April 2026
Protect Your Business
The 10 things every small business owner needs to do to be secure in 2026 -- explained in plain English, with tool recommendations for every budget.
10 April 2026
Protect Your Business
A remote work security policy for small businesses should cover VPN access, home Wi-Fi security, BYOD rules, and approved tools -- here's what to include and why it matters.
3 April 2026
Protect Your Business
Your employees are the most targeted entry point in your business -- this phishing training guide covers free and paid options, simulated attacks, and what actually works.
28 March 2026
Compliance
The NIST Cybersecurity Framework for small business doesn't have to be complicated. This plain-language walkthrough of NIST CSF 2.0 turns each function into concrete actions -- and helps with your cyber insurance application.
21 March 2026
Protect Your Business
A practical multi-factor authentication guide for small businesses -- authenticator apps vs SMS vs hardware keys, and which accounts to secure first.
15 March 2026
Compliance
UK GDPR applies to any business processing personal data -- this guide covers the key requirements, practical steps, ICO fines, and low-cost compliance tools for small businesses.
9 March 2026
Tool Reviews
Free cybersecurity tools for small businesses include Have I Been Pwned, Bitwarden, NCSC resources, and Cloudflare 1.1.1.1 -- here's how to set up each one practically.
2 March 2026
Protect Your Business
Antivirus software only catches known threats -- endpoint security for small businesses now requires EDR, patch management, and mobile device coverage to stay protected.
24 February 2026
Compliance
A plain-English guide to cyber insurance for UK small business owners -- what policies actually cover, what they exclude, how much you should pay, and the security steps insurers now require.
17 February 2026
Cloud Security
Understand cloud storage security for small business. We compare Google Drive, OneDrive, and Dropbox on encryption, admin controls, DLP, and compliance -- plus what you should never store in the cloud.
11 February 2026
Protect Your Business
Business email compromise costs small businesses an average of £137,000 per incident -- learn the red flags, technical defences, and verification processes that stop it.
5 February 2026
Tool Reviews
We tested the top password managers for teams of 2–20 people. Here's which one to pick, how much it costs, and how to get your team actually using it.
29 January 2026
Protect Your Business
A solid backup strategy for small businesses means following the 3-2-1 rule, testing restores regularly, and using immutable backups to survive a ransomware attack.
23 January 2026
Protect Your Business
No IT degree required. Run through this checklist in an hour and you'll know exactly where your business is exposed -- and what to fix first.
16 January 2026
Tool Reviews
We ran both password managers with a 5-person team for 90 days. Here's what we found -- including the one scenario where each one wins.
10 January 2026