October 28, 2026/
Audit logs only help if they are on, retained long enough and searchable. Six checks you can run this week,...
Blog
- All Posts
- Email Security & BEC
- Incident Response & Forensics
- Managed Security
- Other
- PCI DSS & Compliance
- Ransomware
- System & M365 Hardening
- Threat Briefs
- Training & Careers
October 27, 2026/
A composite case study on backup destruction before ransomware, and why containing first and cleaning identity before restoring matters.
October 27, 2026/
A composite case study: a leak announcement names the organization, and responders must scope data theft from evidence, not the...
October 27, 2026/
A composite case study on why patching an exposed gateway is necessary but not sufficient, and what responders check after...
October 27, 2026/
News events can lend phishing urgency and borrowed authority. A nonpartisan guide to staff habits and account response.
October 27, 2026/
Six checks a small IT team can finish in a week: legacy auth, MFA, audit logs, forwarding, admin accounts and...
October 25, 2026/
Two critical PHP flaws (CVE-2026-109618, CVE-2026-109619) have fixes. How to check your build, hunt for signs, contain and patch.
October 25, 2026/
Two critical unauthenticated Next.js flaws and a Node.js security release. How to check exposure, hunt, contain and patch.
October 25, 2026/
A simple procedure for a suspect computer: isolate it, keep it powered on, record what you see, protect accounts, and...
October 25, 2026/
The documents PCI DSS v4.0.1 assessments commonly ask for, what each one shows, and how to keep them current without...
October 25, 2026/
A plain-English order of operations for small and mid-size businesses starting PCI DSS v4.0.1: scope first, reduce what you handle,...
October 25, 2026/
Hit by ransomware? A calm, ordered checklist for the first hours: contain, preserve evidence in parallel, protect backups, call the...