Blog

Field notes from the work

Shorter than a paper, written by whoever did the work. Formal findings live on the research page. Earlier writing, carried over from our previous site, is in the archive.

3 Nov 2026Europe’s freezer cyberattacks: how hackers turned refrigeration systems into cyber-physical weaponsA technical deep dive into OT security, internet-exposed controllers, authentication weaknesses and the new threat to Europe’s cold chain. 3 November 2026. Imagine walking into…

22 Oct 2026PHP2Shell: what a 5 to 150 person firm should ask its web host this week1. What happened On 21 October 2026, PHP released emergency fixes for two flaws, CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell. The flaws allow unauthenticated remote…

1 Jul 2026FROM THE ARCHIVEDual-Chain SBOM Verification for Software Supply Chain IntegritySBOMs are proliferating under regulatory mandate, but an SBOM is only as trustworthy as the process that generated it and the integrity of the chain between generation and consu…

1 Jul 2026FROM THE ARCHIVEOn-Device Behavioural Pathway Analysis for Child Online SafetyKeyword filters and URL blocklists act on content that has already been classified as harmful. But grooming, radicalisation, and self-harm escalation are not single-event phenom…

1 Jul 2026FROM THE ARCHIVEThe S3 Framework: Surface, Sequence, SealTraditional security platforms are collections of disconnected tools, each generating alerts in isolation. The S3 Framework reimagines the entire security pipeline as a single c…

8 Apr 2026FROM THE ARCHIVETop 10 Security Mistakes SMBs Make (And How to Fix Them)Most SMB breaches aren't the result of sophisticated nation-state attacks. They happen because of predictable, preventable mistakes. Here are the top 10 security errors we see a…

7 Apr 2026FROM THE ARCHIVEShadow AI Is Your Next Insider ThreatYour employees aren't trying to steal data, but Shadow AI might do it for them. Here's why unsanctioned AI use is now the fastest-growing insider threat vector for SMBs.

7 Apr 2026FROM THE ARCHIVEWhat Is EDR (And Do SMBs Really Need It?)EDR stands for Endpoint Detection and Response, but what does that actually mean for a small business? Here's a plain-English breakdown of what EDR does, why antivirus isn't eno…

28 Jan 2026FROM THE ARCHIVEAI Is Making Phishing Invisible: Why SMBs Are Losing the Identity BattleAI-generated phishing and deepfakes are changing how cyberattacks work. Learn why identity-based attacks are rising, why SMBs are most exposed, and what practical security measu…

20 Jan 2026FROM THE ARCHIVEShadow AI in SMBs: The Risk No One Is TrackingEmployees are using AI tools faster than security teams can keep up. From browser-based assistants to AI-powered plugins, Shadow AI is quietly expanding the attack surface insid…

15 Jan 2026FROM THE ARCHIVEWhy Microsoft 365 Alone Is Not a Security Strategy for SMBsMicrosoft 365 is a powerful productivity platform, but it was never designed to be a complete security solution. Learn where the gaps are, why attackers exploit them, and what S…

11 Nov 2025FROM THE ARCHIVEWhen Anyone Can Build an App: The Hidden Security Risks of AI-Generated SoftwareAI app builders make development easy for everyone, but at what cost? Discover how no-code and AI-generated apps are quietly introducing new cybersecurity risks, and what small…

26 Jun 2025FROM THE ARCHIVECybersecurity Under Fire: 7 Immediate Steps SMBs ShouldAs geopolitical instability fuels a surge in cyber threats, small and mid-sized businesses (SMBs) face heightened risks from ransomware, phishing, and supply

24 Jun 2025FROM THE ARCHIVECollateral Damage: How Middle East Cyber Attacks AreGeopolitical tensions in the Middle East are fueling a surge in cyber attacks, with small and mid-sized businesses (SMBs) increasingly caught in the crossfire.

20 Jun 2025FROM THE ARCHIVERansomware Defense: How EDR Stops Attacks That Antivirus MissesTraditional antivirus relies on knowing what a virus "looks" like. Modern ransomware looks like normal activity until it's too late. Learn why SMBs need Endpoint Detection & Res…

18 Jun 2025FROM THE ARCHIVECyber Essentials vs ISO 27001: Which Certification is Right for Your SMB?Navigating cybersecurity certifications can be confusing. We compare Cyber Essentials, Cyber Essentials Plus, and ISO 27001 to help you decide which is the best fit for your bus…

15 Jun 2025FROM THE ARCHIVESaaS Security for SMBs: Why M365 and Google Workspace Need More Than Default SettingsDefault security settings in Microsoft 365 and Google Workspace often leave gaps. Learn how to secure your business's most critical productivity tools against account takeovers…

29 May 2025FROM THE ARCHIVEShadow AI: The Unseen Risk Lurking Inside Your OrganizationFrom copy-paste code to confidential data leaks, employees are using AI tools behind your back. Discover how "Shadow AI" is becoming a silent cybersecurity

26 Mar 2025FROM THE ARCHIVEWhat Is Your Attack Surface, and Why SMBs Should MonitorYour digital attack surface includes every entry point a hacker could exploit. For SMBs, monitoring it regularly is essential to avoid becoming an easy target.

26 Mar 2025FROM THE ARCHIVEDemystifying Cybersecurity Compliance for SMBs: Where toCybersecurity compliance can feel overwhelming for small businesses. This blog breaks it down into simple steps and shows you how to meet requirements without

26 Mar 2025FROM THE ARCHIVECybersecurity on a Budget: How SMBs Can Build a StrongSmall and medium businesses are often targeted by cybercriminals but lack the resources of large enterprises. This blog outlines smart, cost-effective

26 Mar 2025FROM THE ARCHIVEWhy SMBs Can't Rely on Antivirus Alone: The Need forAntivirus software is no longer enough to protect small and medium businesses. Discover why endpoint visibility and behavioral monitoring are essential for

26 Mar 2025FROM THE ARCHIVEIncident Response for SMBs: What to Do When Something GoesWhen a cybersecurity incident hits your business, what you do next can make all the difference. Learn how SMBs can prepare and respond effectively, even

15 Mar 2025FROM THE ARCHIVEUnderstanding Zero Trust: Why Traditional SecurityZero Trust security assumes breach and verifies each request as though it originates from an untrusted network. Learn why this approach is essential for modern

10 Mar 2025FROM THE ARCHIVE5 Essential Steps to Protect Your Business from RansomwareRansomware attacks continue to rise, targeting businesses of all sizes. Learn these five crucial steps to protect your organization before it's too late.

5 Mar 2025FROM THE ARCHIVEThe Role of AI in Modern Cybersecurity: Benefits andAI is transforming how businesses approach cybersecurity. Learn how it boosts threat detection and response, while introducing new risks.

26 Jan 2025FROM THE ARCHIVECybersecurity for Healthcare SMBs: Protecting Patient DataHealthcare SMBs face rising cyber threats but often lack big IT budgets. Learn practical, affordable ways to protect patient data and meet HIPAA compliance.

19 Jan 2025FROM THE ARCHIVECybersecurity Essentials for Retail and eCommerce SMBsRetail and eCommerce SMBs face constant cyber threats, from stolen customer data to payment fraud. Learn the key protections every growing business needs.

5 Jan 2025FROM THE ARCHIVECybersecurity for AI Startups: Protecting Innovation fromAI startups move fast, but cyber threats move faster. Learn how emerging AI companies can secure their IP, data pipelines, and models without slowing down

5 Jan 2025FROM THE ARCHIVECybersecurity for Schools and Non-Profits: Doing More withSchools and non-profits are prime cyber targets, but often have the smallest budgets. Learn how they can build effective defenses with smart, affordable

Notes by email, roughly monthlyNew findings and field notes. No product announcements, no newsletter design, unsubscribe in one click.