Home / Blog

Insights // Analysis // Field Notes

Security, in plain English.

Practical analysis on the threats actually hitting small and mid-sized businesses — written by an operator who has run the systems, not just audited them. 31 posts and counting.

"We're Too Small to Hack" and Other Famous Last Words

We hear it all the time. "We're just a small shop -- why would anyone come after us?"

February 24, 2026

Someone's Watching Your Phone Right Now. Maybe.

You unlock your phone, check your bank balance, scroll through texts, snap a photo of your kid. Normal stuff. Private stuff.

February 17, 2026

Six Zero-Days, One Update Button

Last week, Microsoft dropped its February Patch Tuesday update. Fifty-four vulnerabilities fixed. Six of them were zero-days — meaning hackers were already using them…

February 8, 2026

That Text From Your Kid? It's Probably Not Your Kid

You get a text from an unknown number: "Hey Mom, I dropped my phone in the toilet. This is my new number. Can you send me $500 for the bill? I'll pay you back."

November 30, 2024

Do You Need a Virtual CISO? (Probably — Here's Why)

You can't afford a full-time CISO. You also can't afford to not have one. A virtual CISO splits the difference.

What Does a Penetration Test Actually Cost? (And Is It Worth It?)

Penetration tests aren't cheap. Getting breached is a lot more expensive. Here's what a pentest actually costs and what you get for the money.

5 Signs Your Business Has Already Been Hacked (And You Don't Know It)

The average breach goes undetected for over 200 days. Here's what to look for — because by the time it's obvious, it's already bad.

Your Cyber Insurance Application Is Lying (And Your Insurer Knows It)

You checked 'yes' on MFA, backups, and endpoint protection. But can you prove it? Your insurer is going to ask.

February 7, 2023

Keeping Your Technology Safe: A Laughing Matter?

Originally published: February 6, 2023

January 13, 2023

Hackers target small businesses too!

Originally published: January 12, 2023

November 11, 2022

Another Password Posting...

Originally published: November 10, 2022

October 12, 2022

Cybersecurity Awareness Month

Originally published: October 11, 2022

October 7, 2022

Physical Security overlooked?

Originally published: October 6, 2022

September 27, 2022

Do you know what Phishing is?

Originally published: September 26, 2022

August 12, 2019

Google is trying to help

Originally published: August 14, 2017

January 12, 2019

Complicated Passwords are not as complicated as you thought

Originally published: August 11, 2019

November 6, 2018

Read those pesky agreements when logging into a network

Originally published: November 5, 2018

October 11, 2018

Don't forget to secure your computers!

Originally published: October 10, 2018

Keep failing IT Audits?

Originally published: July 11, 2018

Here we are again, another huge data breach - 150 million accounts compromised

Originally published: March 30, 2018

December 2, 2017

Lack of Training

Originally published: December 1, 2017

October 26, 2017

What do you know about Ransomware?

Originally published: October 25, 2017

October 9, 2017

What to do about passwords...

Originally published: October 8, 2017

September 11, 2017

Equifax data breach - a story of What Not to do

Originally published: September 10, 2017

September 4, 2017

Scammers are at it again

Originally published: September 3, 2017

August 28, 2017

If you aren't worried about Phishing - you should be

Originally published: August 27, 2017

August 26, 2017

Small Businesses should be concerned

Originally published: August 25, 2017

August 16, 2017

Data thieves are smart

Originally published: August 15, 2017

August 15, 2017

Industrial Controls are a risk to your business

Originally published: August 14, 2017

Even the government wants to protect you

Originally published: July 6, 2017

Do you want to know if your account has possibly been compromised?

Originally published: June 16, 2017