How AI Is Changing State-Sponsored Cyber Threats for UK SMBs
State-sponsored attackers are reaching small businesses through the systems they already rely on. Here is how to spot it and respond.
Read more →All Articles
668 articles · Page 17 of 34
Your MSP's Remote Support Tool Has a Backdoor. CISA Just Confirmed It.
CISA just added SimpleHelp remote support vulnerabilities to its actively-exploited list. If your IT provider uses it, attackers may already have a path in.
Read more →
Threat Analysis: UK Cyber Threats Roundup, What SMBs Need to Know This Week
A quiet day on the KEV and NVD feeds. Mauven explains why that is not the same as a safe day.
Read more →
Stop Blaming DNS and Start Understanding Your Own Bloody Network
DNS is the messenger, not the murderer. The real problem is that most UK small businesses do not understand their own networks.
Read more →
The Accountancy Firm That Blamed DNS for Three Weeks While a Compromised Router Rewrote Their Network Map
Three weeks. Two resolver changes. One compromised router nobody checked. How a UK accountancy firm blamed DNS while the real threat hid.
Read more →
The Five Step DNS Troubleshooting Guide Your Small Business Actually Needs
Website not loading? Before you blame DNS, follow these five steps. A practical guide that saves hours of wasted time.
Read more →
The NCSC Built Protective DNS for Government. Private Sector SMBs Are Still Guessing.
The NCSC has blocked 1.5 million malicious domains with Protective DNS. Private sector SMBs do not qualify. Here is what that gap means and how to close it.
Read more →
DNS Security Threats Are Not Theoretical: Cache Poisoning, Rogue Resolvers, and the 706,000 Servers Nobody Patched
DNS security is not an enterprise problem. Cache poisoning and rogue resolvers are actively targeting small businesses right now.
Read more →
Fourth-Party Supply Chain Exposure: The Threat Vector UK Businesses Are Not Monitoring
61% of organisations were breached through their supply chain last year. Just 7% monitor beyond immediate suppliers. That is a structural failure, not bad luck.
Read more →
It Is Always DNS, Except When It Isn't: Why Your Office Blames the Wrong Suspect Every Single Time
Every IT person alive has said it is DNS. Half the time it is nonsense. Here is how to stop wasting hours chasing ghosts.
Read more →
The Invoice That Wasn't: A UK BEC Case Study Built From Documented Real-World Patterns
Learn from a UK BEC case study where a property firm lost £12,100. Discover the one free policy that could have stopped it.
Read more →
Preparing for the Next Wave of Cyber Threats: Insights for UK SMBs
63% of UK SMBs faced cyber incidents in 2023. Learn how to prepare and protect your business assets effectively.
Read more →
When McDonald's Gives Better Cybersecurity Advice Than Your IT Department
When McDonald's Netherlands embarrassed the entire security industry with one ad, your password policy became the problem. Here is how to fix it.
Read more →
April 2026 Patch Tuesday: 167 CVEs, Two Zero-Days, and a Deadline You Cannot Afford to Miss
167 CVEs. Two zero-days. One SharePoint flaw needs no password to exploit. April 2026 Patch Tuesday demands your attention today, not next week.
Read more →
A Fridge Failed. The Complaint Went Nowhere. The Data Request Became the Next Dispute.
A household with refrigerated medication says the paid route delivered a worse practical outcome than the free one, and that the later data request became a dispute of its own.
Read more →
Your Insurer Isn't Betting On Your Security. They're Betting You Can't Prove It.
Over 40% of UK cyber claims are denied. Not because businesses are fraudulent: because the real product insurers sell is plausible deniability, not coverage.
Read more →
MFA on the Firewall, Not the Servers: The Case That Shows How UK Cyber Claims Really Die
A UK business said yes to MFA on their proposal form. The attack came through servers with no MFA. The policy was voided. Lucy Harper investigates.
Read more →
Six Controls That Stand Between You and a Denied Cyber Claim
UK insurers check six specific technical controls after a breach. If they're not in place and documented, your claim is at risk. Here's the practical checklist for UK SMBs.
Read more →
Red Canary's March 2026 Threat Report: What UK Small Businesses Need to Do This Week
Paste-and-run is now the dominant attack method. Mac is not safe. Vidar is back. Red Canary's March data, translated into steps you can actually take.
Read more →
Your IT Support Tool Is Now a Burglary Kit: How STAC6405 Is Weaponising Legitimate RMM Software
Attackers are weaponising the same remote access tools your IT team uses. Sophos has the receipts. Here is what happened and what you need to do.
Read more →