Week Ahead: What's Coming on The Small Business Cyber Security Guy
The cyber insurance series is complete. Six posts, one episode. Next week: the Microsoft 365 threat landscape as it actually stands in 2026.
Read more →All Articles
582 articles · Page 12 of 30
Your Insurer Isn't Betting On Your Security. They're Betting You Can't Prove It.
Over 40% of UK cyber claims are denied. Not because businesses are fraudulent: because the real product insurers sell is plausible deniability, not coverage.
Read more →
MFA on the Firewall, Not the Servers: The Case That Shows How UK Cyber Claims Really Die
A UK business said yes to MFA on their proposal form. The attack came through servers with no MFA. The policy was voided. Lucy Harper investigates.
Read more →
Six Controls That Stand Between You and a Denied Cyber Claim
UK insurers check six specific technical controls after a breach. If they're not in place and documented, your claim is at risk. Here's the practical checklist for UK SMBs.
Read more →
Red Canary's March 2026 Threat Report: What UK Small Businesses Need to Do This Week
Paste-and-run is now the dominant attack method. Mac is not safe. Vidar is back. Red Canary's March data, translated into steps you can actually take.
Read more →
Your IT Support Tool Is Now a Burglary Kit: How STAC6405 Is Weaponising Legitimate RMM Software
Attackers are weaponising the same remote access tools your IT team uses. Sophos has the receipts. Here is what happened and what you need to do.
Read more →
Dave Is Your Biggest Security Vulnerability and He Does Not Even Know It
Dave configured the servers in 2014 and only Dave knows how they work. Dave is not a solution. Dave is a liability.
Read more →
The War Exclusion in Your Cyber Policy: Why Being Collateral Damage Might Not Be Covered
Your cyber policy probably excludes losses from state-backed attacks. You may not have read that clause. If a nation-state campaign sweeps through your sector, it could void your cover entirely.
Read more →
WordPress Isn't a Website. It's a Patch Management Emergency With a Blog Attached.
50,000 WordPress sites exposed by one contact form plugin. CVSS 9.8. No login required. This is not bad luck. This is the WordPress business model.
Read more →
The Package Your Developer Trusted: How the Axios Supply Chain Attack Put 100 Million Downloads at Risk
One compromised npm account. Two poisoned packages. 100 million weekly downloads at risk. Who is accountable when open-source governance fails?
Read more →
Two Zero-Days, Zero Patches, Zero Excuses: Windows and Fortinet Are on Fire This Week
Two working exploits in one week. One public, one confirmed in the wild. Neither fully patched. Here is what UK SMBs need to do right now.
Read more →
The Proposal Form That's Building a Landmine Under Your Business
Every answer on your cyber insurance proposal form will be checked against your network logs if you ever claim. Most SMBs answer how they'd like things to be, not how they actually are.
Read more →
You Bought Cyber Insurance. Congratulations. Now Read the Bloody Small Print.
UK insurers paid £197 million in cyber claims in 2024. Impressive. But industry data shows over 40% of claims face denial or partial payment. The problem isn't the attack. It's the proposal form you filled in 18 months ago.
Read more →
Case File: The Cyber Attack That Locked Every School in Northern Ireland
One attack. One network. 350,000 people locked out. And four days later, nobody will say what type of attack it was.
Read more →
The Tech Fridge Audit: How to Do It in 30 Minutes Without Breaking Anything
A 30-minute walkthrough any small business owner can do without specialist knowledge. By the end, you'll have a clear list of what's safe, risky, and what needs to go.
Read more →
The Importance of Cybersecurity in Political Donations
Political donations need cybersecurity to prevent foreign interference. Secure your processes and build trust with these practical steps.
Read more →
Unsupported Software and UK GDPR: The Compliance Risk You Cannot Ignore
Article 32 of UK GDPR requires 'appropriate technical measures' to protect personal data. Running unpatched, out-of-support software is very difficult to defend as appropriate.
Read more →
Protecting Your Business from Virtual Smartphone Scams
Scammers use virtual smartphones to deceive small businesses. Learn how to protect your business and prevent financial loss.
Read more →
The Rise of WhatsApp Malware: What UK SMBs Should Know
Discover the new WhatsApp malware targeting UK SMBs. Learn how to protect your business from harmful VBS payloads and MSI backdoors.
Read more →
Addressing the Challenges of Network Security Management
Struggling with network security? Discover practical steps to protect your small business and avoid common pitfalls. Don't let complexity overwhelm you.
Read more →